bitfiyer-3e23-b6de5[.]bitfiyer-mzkje[.]com

The domain bitfiyer-3e23-b6de5.bitfiyer-mzkje.com is currently flagged as an elevated‑risk brand‑impersonation site targeting the cryptocurrency exchange BitGet. Registration data shows the domain was created on 26 September 2025 through GoDaddy.com, LLC, and is served by the default GoDaddy nameservers ns17.domaincontrol.com and ns18.domaincontrol.com. DNS resolution points to the IPv4 address 162.245.220.172, which belongs to AS150452 owned by LANDUPS LIMITED and is geolocated in Hong Kong. The host presents a TLS certificate issued by Let’s Encrypt (R12), indicating that HTTPS is available but does not provide any validation of the site’s legitimacy.

Public scans on VirusTotal recorded seven detections out of ninety‑three scanners, and the domain appears on two independent blocklists – PhishDestroy and ScamSniffer – reinforcing the malicious assessment. Gridinsoft’s proprietary trust scoring assigned a value of 0 out of 100, reflecting a lack of trust. The page title returned from the live endpoint reads “BitGet,” matching the declared brand target and confirming the intent to masquerade as the legitimate service. The listed scam type is a crypto‑scam, suggesting attempts to lure victims into financial loss.

At the time of analysis the site was offline, so a full content review could not be performed; consequently the exact phishing vectors, credential‑capture forms, or malicious payloads remain unknown. Defenders should block the domain at DNS and proxy layers, monitor for any traffic to the associated IP address, and add the host to internal URL filtering lists. Additional vigilance is advised for users of BitGet who may receive unsolicited communications referencing this domain, as the infrastructure indicates a coordinated attempt to harvest cryptocurrency credentials.