shfzjg[.]com

Analysis indicates that shfzjg.com is an active brand-impersonation domain targeting Bitget, a cryptocurrency exchange and wallet service. The domain was registered on March 13, 2026, through West263 International Limited and currently resolves to IP address 207.148.33.33, hosted on AS59371 (Dimension Network & Communication Limited) in Hong Kong. The site returns an HTTP 200 status and presents a page title in Chinese: 'Bitget官方网站-最佳的数字货币交易钱包,' which directly translates to an official Bitget site claiming to be the best digital currency trading wallet. Infrastructure analysis reveals the use of common web technologies including Bootstrap, GSAP, Apache HTTP Server, Slick, Modernizr, jQuery, and Popper, which are not inherently malicious but are frequently employed in phishing kits. The domain is served by four nameservers (ns1.myhostadmin.net, ns2.myhostadmin.net, ns3.myhostadmin.net, ns4.myhostadmin.net), a pattern often observed in low-cost, bulk-registered malicious infrastructure. The SSL certificate is issued by Let's Encrypt (R12), a legitimate certificate authority commonly abused by threat actors due to its free and automated issuance process. As of July 12, 2026, the domain appears on one security blocklist and is flagged by 12 of 95 security vendors on VirusTotal as malicious. A third-party trust score of 0/100 further supports the assessment of high risk. The domain is classified as a crypto scam and remains active despite being blocked by at least one security provider. Defenders are advised to treat shfzjg.com as confirmed malicious infrastructure. Network-level blocking of the domain and its resolving IP (207.148.33.33) is recommended. Organizations with cryptocurrency operations or users in Chinese-speaking regions should prioritize detection and alerting for connections to this domain.