bitgetn[.]com

This domain, bitgetn.com, is actively impersonating Binance, as indicated by the page title 'Create a free account | Binance' detected on the site. Infrastructure analysis reveals the domain was registered on July 19, 2025, through July Name Limited and is hosted on Amazon Web Services, utilizing Amazon CloudFront for content delivery. The domain resolves to IP address 18.245.46.63 and uses an SSL certificate issued by Google Trust Services. It appears on two security blocklists and is flagged by PhishDestroy and BLP-Malware. Threat intelligence platforms, including AlienVault OTX, have identified this domain in 22 threat intelligence pulses, suggesting widespread recognition as malicious infrastructure. Gridinsoft assigns a trust score of 0/100, further indicating high risk. While the domain is explicitly linked to brand impersonation targeting Apple in some intelligence sources, the page title suggests a focus on Binance, creating uncertainty about the primary target or potential dual-use for phishing campaigns. Defenders should treat this domain as high-risk infrastructure and implement blocking measures at the network and endpoint levels. Given its active status and presence on multiple blocklists, monitoring for related domains or IP associations is recommended to mitigate potential phishing or credential theft attempts.