bitgetco[.]vip

This domain bitgetco.vip was registered on February 21 2026 through NameSilo LLC and currently resolves to IP address 185.18.222.225 located in Japan under AS396356. The nameservers listed are ryan.ns.cloudflare.com and simone.ns.cloudflare.com while the SSL certificate was issued by Let's Encrypt E7. HTTP responses return status code 302 and the site remains active as of the report date. The page title recorded is Web3 Wallet Login and the domain is associated with brand impersonation targeting Bitget in a cryptocurrency scam context. Analysis indicates the infrastructure employs technologies including PHP ThinkPHP Nginx Vue.js OpenResty jQuery and HSTS. VirusTotal reports detections from 7 out of 95 vendors and the domain appears on one security blocklist with an additional presence in one AlienVault OTX threat intelligence pulse. Gridinsoft assigns a trust score of 0 out of 100 and the domain is blocked by PhishDestroy. These indicators establish clear reputation damage through multiple independent sources. What remains uncertain is the precise sequence of redirects following the 302 response and whether additional subdomains or related assets exist beyond the primary record. Defenders should block the IP 185.18.222.225 and the domain bitgetco.vip at network and endpoint layers while monitoring for similar registrations that reuse the observed nameserver pair or certificate authority. Continued observation of the IP location and HTTP behavior is recommended to track any infrastructure changes or migration patterns.