bitget-onchain[.]me

The domain bitget-onchain.me is a phishing site engaged in brand impersonation targeting the cryptocurrency exchange Bitget. It presents itself as an official Bitget platform to deceive users into disclosing login credentials or sensitive information, posing an elevated risk of financial fraud. As of the latest verification, bitget-onchain.me has been taken offline, though users who interacted with it may still face security threats.

Technical indicators confirm the malicious nature of bitget-onchain.me. The domain was registered on September 13, 2025, through NameSilo, LLC, and resolves to the IP address 43.213.72.229, hosted on Amazon.com, Inc. infrastructure in Taiwan. It appears on 1 security blocklist (PhishDestroy) and is flagged by 1 of 95 VirusTotal vendors, including Gridinsoft, which assigned a trust score of 0/100. The site lacks an SSL certificate, and its observed page title was 'BITGET-OnChain'. No drainer kit was identified, but the domain was explicitly designed for cryptocurrency-related scams.

Users who accessed bitget-onchain.me should immediately change their Bitget account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor account activity for signs of fraud, such as unauthorized transactions or login attempts. If cryptocurrency was involved, revoke any token approvals granted to unknown contracts and consider transferring funds to a new wallet. Report the domain to Bitget’s official support channels and submit it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities for further action.