bitgetone[.]net

The domain bitgetone.net is a confirmed phishing site engaged in brand impersonation targeting Bitget, a cryptocurrency exchange. It presents itself as a legitimate trading platform under the name 'UCoin' to deceive users into believing they are interacting with Bitget’s services. This site poses an elevated risk as a cryptocurrency scam, though no drainer kit was identified. As of the latest verification, bitgetone.net has been taken offline.

Technical indicators confirm the malicious nature of bitgetone.net. The domain was flagged by 2 of 95 security vendors on VirusTotal, including ESET and SOCRadar, and appears on 1 security blocklist (PhishDestroy). It was registered through GoDaddy.com, LLC on February 21, 2026, and resolves to the IP address 162.245.220.246, hosted by LANDUPS LIMITED (AS150452) in Hong Kong. The SSL certificate is issued by Let’s Encrypt (R12), and the observed page title reads 'Buy/Sell Bitcoin, Ethereum and Altcoin | Spot / Perpetual Trading | UCoin Cryptocurrency Exchange'. Technologies detected include Vue.js, Nginx, HSTS, and HTTP/3. The domain uses nameservers ns47.domaincontrol.com and ns48.domaincontrol.com.

Users who interacted with bitgetone.net should take immediate action to secure their accounts. If cryptocurrency transactions were attempted, revoke any token approvals and transfer funds to a new wallet. For potential credential exposure, change passwords on the legitimate Bitget platform and enable two-factor authentication (2FA). Report the phishing domain to Bitget’s official support channels and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to prevent further abuse.