bitfiyer-f13a-01fcd[.]bitfiyer-smzk[.]com

The domain bitfiyer-f13a-01fcd.bitfiyer-smzk.com was registered through GoDaddy.com, LLC and first observed on September 26, 2025. Infrastructure analysis shows it resolves to the IP address 162.245.220.172, which is hosted in Hong Kong under ASN 150452 (LANDUPS LIMITED). The domain uses the default GoDaddy nameservers ns69.domaincontrol.com and ns70.domaincontrol.com and presents a Let’s Encrypt R12 TLS certificate, indicating a recent attempt to obtain encryption for web traffic. The page title returned from the site is "BitGet," matching the targeted brand BitGet, and the intelligence classifies the activity as a crypto‑related brand impersonation aimed at BitGet users.

VirusTotal scans report that three of ninety‑three security vendors flagged the domain, and the domain appears on two independent blocklists, specifically PhishDestroy and ScamSniffer, confirming its malicious reputation. Gridinsoft assigns a trust score of 0 / 100, reinforcing the assessment of high risk. The site’s current HTTP status is offline, which may be a tactical takedown or a temporary shutdown, but the underlying infrastructure remains observable.

Defenders should block the resolved IP address and the full domain at perimeter firewalls and DNS filtering solutions, add the domain to internal blocklists, and monitor for any related sub‑domains that may be created under the same registrar or nameserver configuration. Continuous threat‑intel feeds should be consulted for any re‑appearance of the domain or for new indicators tied to the ASN or hosting provider. Organizations that use BitGet services should alert users to verify any unsolicited communications referencing BitGet and to avoid entering credentials on untrusted sites, especially those that reference the observed page title.