bitfiyer-85de-1d43f[.]bitfiyer-gbq231[.]com

The domain bitfiyer-85de-1d43f.bitfiyer-gbq231.com is currently offline but exhibits multiple indicators of a crypto‑scam operation that impersonates the BitGet brand. Registration data shows the domain was created on October 19, 2025 through GoDaddy.com, LLC, and it uses the default GoDaddy name servers ns49.domaincontrol.com and ns50.domaincontrol.com. DNS resolution points to IP address 162.245.220.172, which belongs to AS150452 LANDUPS LIMITED and is geolocated in Hong Kong. The site presented a TLS certificate issued by Let’s Encrypt (R12), confirming that HTTPS was available during its active period.

The page title retrieved from the site was "BitGet," directly matching the brand target listed as bitget, reinforcing the impersonation claim. Gridinsoft assigned a trust score of 0 out of 100, indicating a lack of legitimacy. The domain appears on two independent security blocklists—PhishDestroy and ScamSniffer—both of which classify it as a malicious asset.

VirusTotal analysis recorded 13 detections out of 93 scanned security vendors, further corroborating its malicious nature. Although the site is no longer reachable, defenders should continue to block the domain and its associated IP, monitor for any re‑use of the hosting infrastructure, and add the observed indicators (name servers, SSL fingerprint, and blocklist entries) to internal threat‑intelligence feeds. Continuous telemetry on related DNS queries and any resurgence of the domain will help confirm whether the actors attempt to reactivate or relocate their infrastructure.