kn-bitget[.]com[.]cn

The domain www.kn-bitget.com.cn is a confirmed phishing site engaged in brand impersonation targeting Bitget, a cryptocurrency exchange. It was designed to deceive users into believing they were interacting with the legitimate Bitget platform, posing an elevated risk of credential theft or financial fraud. As of the latest verification, www.kn-bitget.com.cn has been taken offline, though it previously operated as an active scam site.

Technical analysis reveals that www.kn-bitget.com.cn was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and SOCRadar. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on March 22, 2026, and resolved to the IP address 154.204.135.226, hosted by Fastmos Co Limited in Hong Kong. It appeared on one security blocklist (PhishDestroy) and used an SSL certificate issued by TrustAsia Technologies, Inc. under the LiteSSL RSA CA 2025. The observed page title was identical to the domain name, and the site employed Nginx with HSTS enabled. Gridinsoft assigned it a trust score of 0/100, further indicating its malicious nature.

Users who interacted with www.kn-bitget.com.cn should immediately change any passwords or credentials entered on the site and enable two-factor authentication on their Bitget account. If cryptocurrency transactions were attempted, revoke any token approvals and consider transferring funds to a new wallet. Report the domain to relevant authorities, including the impersonated brand (Bitget) and platforms like Google Safe Browsing or PhishTank to aid in broader mitigation efforts.