Bitget
Certificate findings for Bitget
DomainSpoof matched these hostnames, from public certificate logs, to Bitget's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.
Published now · 61 findings, grouped by hostname
- bitgetsupport.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 11 mo ago
DetailsHide details for bitgetsupport.site
- Hostname
- bitgetsupport.site
- First seen
- 2026-11-05 07:12 UTC
- First published
- 2026-11-05 07:32 UTC
- DNS
- Resolves · checked 2026-11-05 07:44 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 2.57.91.91
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-05 06:03 UTC to 2027-02-03 06:03 UTCLogged 2026-11-05 07:01 UTC in Let's Encrypt Sycamore2027h1, entry 954,865,794SHA-256 3a874650653b10dc8986fc3f86e114b756dbfeb556fdcc0148a1a4c527d8ec44Public key SHA-256 5d132ddf270d2f135b3f64d887f75e8ad5750f8466b5e42f7dda7f3fc268cd38
- Brand
- Bitget
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- bitgetsupport.site
- Registered
- 2025-12-08 · HOSTINGER operations, UAB
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 07:08 UTC
- www.bitgetsupport.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 11 mo ago
DetailsHide details for www.bitgetsupport.site
- Hostname
- www.bitgetsupport.site
- First seen
- 2026-11-05 07:05 UTC
- First published
- 2026-11-05 07:32 UTC
- DNS
- Resolves · checked 2026-11-05 07:44 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 2.57.91.91
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-11-05 06:03 UTC to 2027-02-03 06:03 UTCLogged 2026-11-05 07:01 UTC in Let's Encrypt Sycamore2027h1, entry 954,865,794SHA-256 3a874650653b10dc8986fc3f86e114b756dbfeb556fdcc0148a1a4c527d8ec44Public key SHA-256 5d132ddf270d2f135b3f64d887f75e8ad5750f8466b5e42f7dda7f3fc268cd38
- Brand
- Bitget
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- bitgetsupport.site
- Registered
- 2025-12-08 · HOSTINGER operations, UAB
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 07:08 UTC
- h5.bitget.love US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareUnder bitget.love, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for h5.bitget.love
- Hostname
- h5.bitget.love
- First seen
- 2026-11-04 18:30 UTC
- First published
- 2026-11-04 18:52 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 18:54 UTC
- Listed
- MetaMask, listing bitget.love and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-04 17:29 UTC to 2027-02-02 17:29 UTCLogged 2026-11-04 18:27 UTC in Google PlumbersArms2027h1, entry 613,135,378SHA-256 4e0fabb5dbe0b290ea98976a9f42600d0ce99e4c37bee86acb3afabaacde45caPublic key SHA-256 62a1025ad21003331232a5c7aeb0e9ff619508464858c3433adeefb64776eea4
- Brand
- Bitget
- Addresses
- 104.21.41.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.149.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:95152606:4700:3037::6815:29b2
- Cloudflare
- Cloudflare (104.21.41.178, 172.67.149.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- bitget.love
- Registered
- 2026-07-01 · GoDaddy
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 10:58 UTC
- webapi.bitget.love US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareUnder bitget.love, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for webapi.bitget.love
- Hostname
- webapi.bitget.love
- First seen
- 2026-11-04 18:30 UTC
- First published
- 2026-11-04 18:52 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 18:54 UTC
- Listed
- MetaMask, listing bitget.love and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-11-04 17:29 UTC to 2027-02-02 17:29 UTCLogged 2026-11-04 18:27 UTC in Google PlumbersArms2027h1, entry 613,135,378SHA-256 4e0fabb5dbe0b290ea98976a9f42600d0ce99e4c37bee86acb3afabaacde45caPublic key SHA-256 62a1025ad21003331232a5c7aeb0e9ff619508464858c3433adeefb64776eea4
- Brand
- Bitget
- Addresses
- 104.21.41.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.149.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:95152606:4700:3037::6815:29b2
- Cloudflare
- Cloudflare (104.21.41.178, 172.67.149.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- bitget.love
- Registered
- 2026-07-01 · GoDaddy
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 10:58 UTC
- m.bitget-hub.cn HK · AS134175 · UNIT A17,9/F SILVERCORP INT…Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for m.bitget-hub.cn
- Hostname
- m.bitget-hub.cn
- First seen
- 2026-11-04 12:20 UTC
- First published
- 2026-11-05 07:32 UTC
- DNS
- Resolves · checked 2026-11-05 07:44 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 177.211.118.185.
- Resolved to 177.211.118.185
- Phishing-host list fetched with the address
- Latest DNS check
- Brand
- Bitget
- Addresses
- 177.211.118.185 · Hong Kong · AS134175 SH2206-AP - UNIT A17,9/F SILVERCORP INT'L TOWER 707-713 NATHAN RD
- Domain
- bitget-hub.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 07:27 UTC
- bitget-hub.cn HK · AS134175 · UNIT A17,9/F SILVERCORP INT…Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for bitget-hub.cn
- Hostname
- bitget-hub.cn
- First seen
- 2026-11-04 12:20 UTC
- First published
- 2026-11-05 07:32 UTC
- DNS
- Resolves · checked 2026-11-05 07:44 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 177.211.118.185.
- Resolved to 177.211.118.185
- Phishing-host list fetched with the address
- Latest DNS check
- Brand
- Bitget
- Addresses
- 177.211.118.185 · Hong Kong · AS134175 SH2206-AP - UNIT A17,9/F SILVERCORP INT'L TOWER 707-713 NATHAN RD
- Domain
- bitget-hub.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 07:27 UTC
- www.bitget-hub.cn HK · AS134175 · UNIT A17,9/F SILVERCORP INT…Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for www.bitget-hub.cn
- Hostname
- www.bitget-hub.cn
- First seen
- 2026-11-04 12:10 UTC
- First published
- 2026-11-05 07:32 UTC
- DNS
- Resolves · checked 2026-11-05 07:44 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 177.211.118.185.
- Resolved to 177.211.118.185
- Phishing-host list fetched with the address
- Latest DNS check
- Brand
- Bitget
- Addresses
- 177.211.118.185 · Hong Kong · AS134175 SH2206-AP - UNIT A17,9/F SILVERCORP INT'L TOWER 707-713 NATHAN RD
- Domain
- bitget-hub.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 07:27 UTC
- www.bitget-gq.com.cn HK · AS134175 · UNIT A17,9/F SILVERCORP INT…Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for www.bitget-gq.com.cn
- Hostname
- www.bitget-gq.com.cn
- First seen
- 2026-11-04 11:52 UTC
- First published
- 2026-11-04 13:12 UTC
- DNS
- Resolves · checked 2026-11-04 13:32 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 177.211.96.251.
- Resolved to 177.211.96.251
- Phishing-host list fetched with the address
- Latest DNS check
- Brand
- Bitget
- Addresses
- 177.211.96.251 · Hong Kong · AS134175 SH2206-AP - UNIT A17,9/F SILVERCORP INT'L TOWER 707-713 NATHAN RD
- Domain
- bitget-gq.com.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 12:27 UTC
- m.bitget-gq.com.cn HK · AS134175 · UNIT A17,9/F SILVERCORP INT…Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for m.bitget-gq.com.cn
- Hostname
- m.bitget-gq.com.cn
- First seen
- 2026-11-04 11:52 UTC
- First published
- 2026-11-04 13:12 UTC
- DNS
- Resolves · checked 2026-11-04 13:32 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 177.211.96.251.
- Resolved to 177.211.96.251
- Phishing-host list fetched with the address
- Latest DNS check
- Brand
- Bitget
- Addresses
- 177.211.96.251 · Hong Kong · AS134175 SH2206-AP - UNIT A17,9/F SILVERCORP INT'L TOWER 707-713 NATHAN RD
- Domain
- bitget-gq.com.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 12:27 UTC
- bitget-gq.com.cn HK · AS134175 · UNIT A17,9/F SILVERCORP INT…Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for bitget-gq.com.cn
- Hostname
- bitget-gq.com.cn
- First seen
- 2026-11-04 11:52 UTC
- First published
- 2026-11-04 13:12 UTC
- DNS
- Resolves · checked 2026-11-04 13:32 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 177.211.96.251.
- Resolved to 177.211.96.251
- Phishing-host list fetched with the address
- Latest DNS check
- Brand
- Bitget
- Addresses
- 177.211.96.251 · Hong Kong · AS134175 SH2206-AP - UNIT A17,9/F SILVERCORP INT'L TOWER 707-713 NATHAN RD
- Domain
- bitget-gq.com.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 12:27 UTC
- www.bitgetio.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.2 addressesReportedPhishing hostUnder bitgetio.icu, reported by PhishDestroy · Address hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 11 mo ago
DetailsHide details for www.bitgetio.icu
- Hostname
- www.bitgetio.icu
- First seen
- 2026-11-02 20:10 UTC
- First published
- 2026-11-02 20:24 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 16:33 UTC
- Reported
- PhishDestroy, listing bitgetio.icu and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
- Phishing-host list fetched with the address
- Resolved to 91.199.133.247
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 19:09 UTC to 2027-01-31 19:09 UTCLogged 2026-11-02 20:08 UTC in IPng Networks Gouda2027h1, entry 296,113,019SHA-256 c0987f669bbf99116502bc9a653feea4df14d467ecb8b2f43df392a23b9bec46Public key SHA-256 c78dcf5064395ddf7f4faab6127930002c951d195e2618b1b75753ac2938f65c
- PhishDestroy
- Brand
- Bitget
- Addresses
- 91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
- Domain
- bitgetio.icu
- Registered
- 2025-12-03 · Dynadot Inc
- MX
- Receives mail at mx.bitgetio.icu
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 23:38 UTC
- bitget-wallet.online US · AS16509 · Amazon.com, Inc.2 addressesReportedParking page · AfternicReported by PhishDestroyMX absentSPF -allDMARC missingRegistered 10 mo ago
DetailsHide details for bitget-wallet.online
- Hostname
- bitget-wallet.online
- First seen
- 2026-11-02 17:21 UTC
- First published
- 2026-11-02 18:02 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 18:09 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by GoDaddy TLS Intermediate CA DV - R1v1 · precertificateValid 2026-11-02 17:18 UTC to 2027-05-19 17:18 UTCLogged 2026-11-02 17:18 UTC in Sectigo Elephant2027h1, entry 684,480,718SHA-256 746c8774607cb9bf956e1850120778d2d7982cbd59f1c19d90f781fda83bba8ePublic key SHA-256 d3bf763d3d2fde6dacb568babcb82408d4dbbb4a84c8897d09d0417819fbb7b5
- PhishDestroy
- Brand
- Bitget
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates bitget-wallet.online to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Domain
- bitget-wallet.online
- Registered
- 2026-01-09 · GoDaddy.com, LLC
- MX
- Publishes no mail exchanger
- SPF
- SPF record with -all: other senders fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 09:49 UTC
- bitget.bioListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for bitget.bio
- Hostname
- bitget.bio
- First seen
- 2026-11-02 16:46 UTC
- First published
- 2026-11-02 16:54 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Not resolving since 2026-11-02 · checked 2026-11-04 16:58 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-02 15:42 UTC to 2027-01-31 16:40 UTCLogged 2026-11-02 16:42 UTC in Let's Encrypt Willow2027h1, entry 899,239,845SHA-256 736e6a433729569852fdbc40f755a7b712b73e6d5b7777f81da67c18d1d07878Public key SHA-256 d1e8fd3ca8872da461dab84380935ca5531c337da1d518802fb3a84b80f21572
- Brand
- Bitget
- Domain
- bitget.bio
- Registered
- 2026-07-07 · GoDaddy.com, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 09:49 UTC
- zh.bitget-bg.cn HK · AS153494 · XRUI TECHNOLOGY LIMITEDPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for zh.bitget-bg.cn
- Hostname
- zh.bitget-bg.cn
- First seen
- 2026-11-02 15:11 UTC
- First published
- 2026-11-02 15:44 UTC
- DNS
- Resolves · checked 2026-11-04 15:58 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.122.135.218.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 45.122.135.218
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 14:11 UTC to 2027-01-31 14:11 UTCLogged 2026-11-02 15:09 UTC in Geomys Tuscolo2027h1, entry 446,707,932SHA-256 0696641fdbd6dc41455648dac98cd8fd278f24cf594a981c434a19e7b79a1faaPublic key SHA-256 1330dde440bbcb02ed4dbe6a6a3907b376f9b5f42111df0d872c1f1b316eb4da
- Brand
- Bitget
- Addresses
- 45.122.135.218 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
- Domain
- bitget-bg.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- trade.bitget-bg.cn HK · AS153494 · XRUI TECHNOLOGY LIMITEDPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for trade.bitget-bg.cn
- Hostname
- trade.bitget-bg.cn
- First seen
- 2026-11-02 15:11 UTC
- First published
- 2026-11-02 15:44 UTC
- DNS
- Resolves · checked 2026-11-04 15:58 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.122.135.218.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 45.122.135.218
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 14:11 UTC to 2027-01-31 14:11 UTCLogged 2026-11-02 15:09 UTC in Geomys Tuscolo2027h1, entry 446,707,932SHA-256 0696641fdbd6dc41455648dac98cd8fd278f24cf594a981c434a19e7b79a1faaPublic key SHA-256 1330dde440bbcb02ed4dbe6a6a3907b376f9b5f42111df0d872c1f1b316eb4da
- Brand
- Bitget
- Addresses
- 45.122.135.218 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
- Domain
- bitget-bg.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- reg.bitget-bg.cn HK · AS153494 · XRUI TECHNOLOGY LIMITEDPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for reg.bitget-bg.cn
- Hostname
- reg.bitget-bg.cn
- First seen
- 2026-11-02 15:11 UTC
- First published
- 2026-11-02 15:44 UTC
- DNS
- Resolves · checked 2026-11-04 15:58 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.122.135.218.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 45.122.135.218
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 14:11 UTC to 2027-01-31 14:11 UTCLogged 2026-11-02 15:09 UTC in Geomys Tuscolo2027h1, entry 446,707,932SHA-256 0696641fdbd6dc41455648dac98cd8fd278f24cf594a981c434a19e7b79a1faaPublic key SHA-256 1330dde440bbcb02ed4dbe6a6a3907b376f9b5f42111df0d872c1f1b316eb4da
- Brand
- Bitget
- Addresses
- 45.122.135.218 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
- Domain
- bitget-bg.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- new.bitget-bg.cn HK · AS153494 · XRUI TECHNOLOGY LIMITEDPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for new.bitget-bg.cn
- Hostname
- new.bitget-bg.cn
- First seen
- 2026-11-02 15:11 UTC
- First published
- 2026-11-02 15:44 UTC
- DNS
- Resolves · checked 2026-11-04 15:58 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.122.135.218.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 45.122.135.218
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 14:11 UTC to 2027-01-31 14:11 UTCLogged 2026-11-02 15:09 UTC in Geomys Tuscolo2027h1, entry 446,707,932SHA-256 0696641fdbd6dc41455648dac98cd8fd278f24cf594a981c434a19e7b79a1faaPublic key SHA-256 1330dde440bbcb02ed4dbe6a6a3907b376f9b5f42111df0d872c1f1b316eb4da
- Brand
- Bitget
- Addresses
- 45.122.135.218 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
- Domain
- bitget-bg.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- main.bitget-bg.cn HK · AS153494 · XRUI TECHNOLOGY LIMITEDPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for main.bitget-bg.cn
- Hostname
- main.bitget-bg.cn
- First seen
- 2026-11-02 15:11 UTC
- First published
- 2026-11-02 15:44 UTC
- DNS
- Resolves · checked 2026-11-04 15:58 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.122.135.218.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 45.122.135.218
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 14:11 UTC to 2027-01-31 14:11 UTCLogged 2026-11-02 15:09 UTC in Geomys Tuscolo2027h1, entry 446,707,932SHA-256 0696641fdbd6dc41455648dac98cd8fd278f24cf594a981c434a19e7b79a1faaPublic key SHA-256 1330dde440bbcb02ed4dbe6a6a3907b376f9b5f42111df0d872c1f1b316eb4da
- Brand
- Bitget
- Addresses
- 45.122.135.218 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
- Domain
- bitget-bg.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- mail.bitget-bg.cn HK · AS153494 · XRUI TECHNOLOGY LIMITEDPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for mail.bitget-bg.cn
- Hostname
- mail.bitget-bg.cn
- First seen
- 2026-11-02 15:11 UTC
- First published
- 2026-11-02 15:44 UTC
- DNS
- Resolves · checked 2026-11-04 15:58 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.122.135.218.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 45.122.135.218
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 14:11 UTC to 2027-01-31 14:11 UTCLogged 2026-11-02 15:09 UTC in Geomys Tuscolo2027h1, entry 446,707,932SHA-256 0696641fdbd6dc41455648dac98cd8fd278f24cf594a981c434a19e7b79a1faaPublic key SHA-256 1330dde440bbcb02ed4dbe6a6a3907b376f9b5f42111df0d872c1f1b316eb4da
- Brand
- Bitget
- Addresses
- 45.122.135.218 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
- Domain
- bitget-bg.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- ios.bitget-bg.cn HK · AS153494 · XRUI TECHNOLOGY LIMITEDPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for ios.bitget-bg.cn
- Hostname
- ios.bitget-bg.cn
- First seen
- 2026-11-02 15:11 UTC
- First published
- 2026-11-02 15:44 UTC
- DNS
- Resolves · checked 2026-11-04 15:58 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.122.135.218.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 45.122.135.218
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 14:11 UTC to 2027-01-31 14:11 UTCLogged 2026-11-02 15:09 UTC in Geomys Tuscolo2027h1, entry 446,707,932SHA-256 0696641fdbd6dc41455648dac98cd8fd278f24cf594a981c434a19e7b79a1faaPublic key SHA-256 1330dde440bbcb02ed4dbe6a6a3907b376f9b5f42111df0d872c1f1b316eb4da
- Brand
- Bitget
- Addresses
- 45.122.135.218 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
- Domain
- bitget-bg.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- go.bitget-bg.cn HK · AS153494 · XRUI TECHNOLOGY LIMITEDPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for go.bitget-bg.cn
- Hostname
- go.bitget-bg.cn
- First seen
- 2026-11-02 15:11 UTC
- First published
- 2026-11-02 15:44 UTC
- DNS
- Resolves · checked 2026-11-04 15:58 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.122.135.218.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 45.122.135.218
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 14:11 UTC to 2027-01-31 14:11 UTCLogged 2026-11-02 15:09 UTC in Geomys Tuscolo2027h1, entry 446,707,932SHA-256 0696641fdbd6dc41455648dac98cd8fd278f24cf594a981c434a19e7b79a1faaPublic key SHA-256 1330dde440bbcb02ed4dbe6a6a3907b376f9b5f42111df0d872c1f1b316eb4da
- Brand
- Bitget
- Addresses
- 45.122.135.218 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
- Domain
- bitget-bg.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- cn.bitget-bg.cn HK · AS153494 · XRUI TECHNOLOGY LIMITEDPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for cn.bitget-bg.cn
- Hostname
- cn.bitget-bg.cn
- First seen
- 2026-11-02 15:11 UTC
- First published
- 2026-11-02 15:44 UTC
- DNS
- Resolves · checked 2026-11-04 15:58 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.122.135.218.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 45.122.135.218
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 14:11 UTC to 2027-01-31 14:11 UTCLogged 2026-11-02 15:09 UTC in Geomys Tuscolo2027h1, entry 446,707,932SHA-256 0696641fdbd6dc41455648dac98cd8fd278f24cf594a981c434a19e7b79a1faaPublic key SHA-256 1330dde440bbcb02ed4dbe6a6a3907b376f9b5f42111df0d872c1f1b316eb4da
- Brand
- Bitget
- Addresses
- 45.122.135.218 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
- Domain
- bitget-bg.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- check.bitget-bg.cn HK · AS153494 · XRUI TECHNOLOGY LIMITEDPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for check.bitget-bg.cn
- Hostname
- check.bitget-bg.cn
- First seen
- 2026-11-02 15:11 UTC
- First published
- 2026-11-02 15:44 UTC
- DNS
- Resolves · checked 2026-11-04 15:58 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.122.135.218.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 45.122.135.218
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 14:11 UTC to 2027-01-31 14:11 UTCLogged 2026-11-02 15:09 UTC in Geomys Tuscolo2027h1, entry 446,707,932SHA-256 0696641fdbd6dc41455648dac98cd8fd278f24cf594a981c434a19e7b79a1faaPublic key SHA-256 1330dde440bbcb02ed4dbe6a6a3907b376f9b5f42111df0d872c1f1b316eb4da
- Brand
- Bitget
- Addresses
- 45.122.135.218 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
- Domain
- bitget-bg.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- bitget-bg.cn HK · AS153494 · XRUI TECHNOLOGY LIMITEDPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for bitget-bg.cn
- Hostname
- bitget-bg.cn
- First seen
- 2026-11-02 15:11 UTC
- First published
- 2026-11-02 15:44 UTC
- DNS
- Resolves · checked 2026-11-04 15:58 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.122.135.218.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 45.122.135.218
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 14:11 UTC to 2027-01-31 14:11 UTCLogged 2026-11-02 15:09 UTC in Geomys Tuscolo2027h1, entry 446,707,932SHA-256 0696641fdbd6dc41455648dac98cd8fd278f24cf594a981c434a19e7b79a1faaPublic key SHA-256 1330dde440bbcb02ed4dbe6a6a3907b376f9b5f42111df0d872c1f1b316eb4da
- Brand
- Bitget
- Addresses
- 45.122.135.218 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
- Domain
- bitget-bg.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- app.bitget-bg.cn HK · AS153494 · XRUI TECHNOLOGY LIMITEDPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for app.bitget-bg.cn
- Hostname
- app.bitget-bg.cn
- First seen
- 2026-11-02 15:11 UTC
- First published
- 2026-11-02 15:44 UTC
- DNS
- Resolves · checked 2026-11-04 15:58 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.122.135.218.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 45.122.135.218
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 14:11 UTC to 2027-01-31 14:11 UTCLogged 2026-11-02 15:09 UTC in Geomys Tuscolo2027h1, entry 446,707,932SHA-256 0696641fdbd6dc41455648dac98cd8fd278f24cf594a981c434a19e7b79a1faaPublic key SHA-256 1330dde440bbcb02ed4dbe6a6a3907b376f9b5f42111df0d872c1f1b316eb4da
- Brand
- Bitget
- Addresses
- 45.122.135.218 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
- Domain
- bitget-bg.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- apk.bitget-bg.cn HK · AS153494 · XRUI TECHNOLOGY LIMITEDPhishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
DetailsHide details for apk.bitget-bg.cn
- Hostname
- apk.bitget-bg.cn
- First seen
- 2026-11-02 15:11 UTC
- First published
- 2026-11-02 15:44 UTC
- DNS
- Resolves · checked 2026-11-04 15:58 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.122.135.218.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 45.122.135.218
- Latest DNS check
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 14:11 UTC to 2027-01-31 14:11 UTCLogged 2026-11-02 15:09 UTC in Geomys Tuscolo2027h1, entry 446,707,932SHA-256 0696641fdbd6dc41455648dac98cd8fd278f24cf594a981c434a19e7b79a1faaPublic key SHA-256 1330dde440bbcb02ed4dbe6a6a3907b376f9b5f42111df0d872c1f1b316eb4da
- Brand
- Bitget
- Addresses
- 45.122.135.218 · Hong Kong · AS153494 XRUI-AS-AP - XRUI TECHNOLOGY LIMITED
- Domain
- bitget-bg.cn
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- kf.bitget.love US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareUnder bitget.love, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for kf.bitget.love
- Hostname
- kf.bitget.love
- First seen
- 2026-11-02 07:36 UTC
- First published
- 2026-11-02 08:00 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 08:04 UTC
- Listed
- MetaMask, listing bitget.love and the names under it
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-11-02 06:31 UTC to 2027-01-31 07:30 UTCLogged 2026-11-02 07:31 UTC in Let's Encrypt Sycamore2027h1, entry 899,516,477SHA-256 5be41eb8f4f37ebedfe4bb049044b8d971bb7abf806147f9d41d74fa7b2bad63Public key SHA-256 6d0cdc5a0cd6f5bcbc49d0274f552ee3bfbec5918daf8bece4c9a95fb8440505
- Brand
- Bitget
- Addresses
- 104.21.41.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.149.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:95152606:4700:3037::6815:29b2
- Cloudflare
- Cloudflare (104.21.41.178, 172.67.149.21): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- bitget.love
- Registered
- 2026-07-01 · GoDaddy
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 10:58 UTC
- www.bitget.se PL · AS48707 · AS48707-OPS-PL AS48707 OPS …ReportedPhishing hostUnder bitget.se, reported by PhishDestroy · Address hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC reject
DetailsHide details for www.bitget.se
- Hostname
- www.bitget.se
- First seen
- 2026-11-01 12:31 UTC
- First published
- 2026-11-01 13:04 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 13:09 UTC
- Reported
- PhishDestroy, listing bitget.se and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.253.212.22.
- Phishing-host list fetched with the address
- Resolved to 185.253.212.22
- Latest DNS check
- Certificate
- Issued by YR2 · precertificateValid 2026-11-01 11:31 UTC to 2027-01-30 11:31 UTCLogged 2026-11-01 12:29 UTC in Let's Encrypt Willow2027h1, entry 879,965,285SHA-256 7af875e2c4d361ead66f2cc53cc27b4a2505a799c65abde092c54e4ea52b2a15Public key SHA-256 491526359a9b8160f4c8aabf3ab77d28453f1bd1fe736a2a7282e0c4c2410f1d
- PhishDestroy
- Brand
- Bitget
- Addresses
- 185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
- Domain
- bitget.se
- MX
- Receives mail at blackhole.aftermarket.pl
- SPF
- SPF record with -all: other senders fail
- DMARC
- DMARC policy p=reject
- Checked
- 2026-11-04 13:27 UTC
- bitget.se PL · AS48707 · AS48707-OPS-PL AS48707 OPS …ReportedPhishing hostReported by PhishDestroy · Address hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC reject
DetailsHide details for bitget.se
- Hostname
- bitget.se
- First seen
- 2026-11-01 12:31 UTC
- First published
- 2026-11-01 13:04 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-04 13:09 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.253.212.22.
- Phishing-host list fetched with the address
- Resolved to 185.253.212.22
- Latest DNS check
- Certificate
- Issued by YR2 · precertificateValid 2026-11-01 11:31 UTC to 2027-01-30 11:31 UTCLogged 2026-11-01 12:29 UTC in Let's Encrypt Willow2027h1, entry 879,965,285SHA-256 7af875e2c4d361ead66f2cc53cc27b4a2505a799c65abde092c54e4ea52b2a15Public key SHA-256 491526359a9b8160f4c8aabf3ab77d28453f1bd1fe736a2a7282e0c4c2410f1d
- PhishDestroy
- Brand
- Bitget
- Addresses
- 185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
- Domain
- bitget.se
- MX
- Receives mail at blackhole.aftermarket.pl
- SPF
- SPF record with -all: other senders fail
- DMARC
- DMARC policy p=reject
- Checked
- 2026-11-04 13:27 UTC
- bitgetjp.site AU · AS154653 · ParkLogic Pty LtdReportedParking page · ParkLogicReported by PhishDestroyMX presentSPF -allDMARC missingRegistered 12 mo ago
DetailsHide details for bitgetjp.site
- Hostname
- bitgetjp.site
- First seen
- 2026-10-31 05:42 UTC
- First published
- 2026-10-31 06:08 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-31 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 06:11 UTC
- Reported
- PhishDestroy
- Certificate logged in CT
- Observed in the PhishDestroy feed
- We matched the new listing
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-10-30 18:15 UTC to 2027-01-28 18:15 UTCLogged 2026-10-30 19:14 UTC in Let's Encrypt Sycamore2027h1, entry 860,257,578SHA-256 647d60f9d01120b316f4c9f8ef01ae93e60b08baf3b07f8c81c7a0304346b4ddPublic key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
- PhishDestroy
- Brand
- Bitget
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates bitgetjp.site to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- Domain
- bitgetjp.site
- Registered
- 2025-10-30 · NameSilo, LLC
- MX
- Receives mail at mail.eye-mail.net
- SPF
- SPF record with -all: other senders fail
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:54 UTC
- bitgetjp.shop MD · AS200019 · AlexHost ALEXHOST S.R.L.ReportedReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 12 mo ago
DetailsHide details for bitgetjp.shop
- Hostname
- bitgetjp.shop
- First seen
- 2026-10-31 02:46 UTC
- First published
- 2026-10-31 02:53 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 02:57 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2 · precertificateValid 2026-10-31 01:43 UTC to 2027-01-29 01:43 UTCLogged 2026-10-31 02:42 UTC in DigiCert Sphinx2027h1, entry 320,328,282SHA-256 a81a2a9e5ebc643ba1cf7bdd2110ca01cd67ef35c212fa32480f1bb62c1594eePublic key SHA-256 6eacdc1cb7633efd1dc58738db5070f1914ae22fa20931a8c7dd415a793076bd
- PhishDestroy
- Brand
- Bitget
- Addresses
- 37.221.67.157 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
- Domain
- bitgetjp.shop
- Registered
- 2025-10-30 · Dynadot Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 03:54 UTC
- www.bitget.cz PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC rejectRegistered 5 y ago
DetailsHide details for www.bitget.cz
- Hostname
- www.bitget.cz
- First seen
- 2026-10-31 02:01 UTC
- First published
- 2026-10-31 02:53 UTC
- DNS
- Resolves · checked 2026-11-05 02:57 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.253.212.22.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 185.253.212.22
- Latest DNS check
- Certificate
- Issued by YR1Valid 2026-10-31 01:00 UTC to 2027-01-29 01:00 UTCLogged 2026-10-31 01:58 UTC in Google ParcelYard2027h1, entry 531,944,591SHA-256 e8931d97465c75feda52e529a0dcdeea53190225be7d7f2fd93a1cb02d4df8f1Public key SHA-256 c38e06808c6409ab89023a4602cc50bc645708a9a3a985d04ffefbc3b3867009
- Brand
- Bitget
- Addresses
- 185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
- Domain
- bitget.cz
- Registered
- 2022-02-08 · Key-Systems GmbH
- MX
- Receives mail at blackhole.aftermarket.pl
- SPF
- SPF record with -all: other senders fail
- DMARC
- DMARC policy p=reject
- Checked
- 2026-11-05 03:54 UTC
- bitget.cz PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC rejectRegistered 5 y ago
DetailsHide details for bitget.cz
- Hostname
- bitget.cz
- First seen
- 2026-10-31 02:01 UTC
- First published
- 2026-10-31 02:53 UTC
- DNS
- Resolves · checked 2026-11-05 02:57 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.253.212.22.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 185.253.212.22
- Latest DNS check
- Certificate
- Issued by YR1Valid 2026-10-31 01:00 UTC to 2027-01-29 01:00 UTCLogged 2026-10-31 01:58 UTC in Google ParcelYard2027h1, entry 531,944,591SHA-256 e8931d97465c75feda52e529a0dcdeea53190225be7d7f2fd93a1cb02d4df8f1Public key SHA-256 c38e06808c6409ab89023a4602cc50bc645708a9a3a985d04ffefbc3b3867009
- Brand
- Bitget
- Addresses
- 185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
- Domain
- bitget.cz
- Registered
- 2022-02-08 · Key-Systems GmbH
- MX
- Receives mail at blackhole.aftermarket.pl
- SPF
- SPF record with -all: other senders fail
- DMARC
- DMARC policy p=reject
- Checked
- 2026-11-05 03:54 UTC
- bitgetio.icu MD · AS200019 · AlexHost ALEXHOST S.R.L.2 addressesReportedPhishing hostReported by PhishDestroy · Address hosted confirmed phishing in the last 48 hMX presentSPF missingDMARC missingRegistered 11 mo ago
DetailsHide details for bitgetio.icu
- Hostname
- bitgetio.icu
- First seen
- 2026-10-30 05:40 UTC
- First published
- 2026-10-30 06:35 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-30 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 06:39 UTC
- Reported
- PhishDestroy
- Certificate logged in CT
- Observed in the PhishDestroy feed
- We matched the new listing
- Latest DNS check
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 91.199.133.247.
- Phishing-host list fetched with the address
- Certificate logged in CT
- Resolved to 91.199.133.247
- Latest DNS check
- Certificate
- Issued by YE2Valid 2026-10-29 15:15 UTC to 2027-01-27 15:15 UTCLogged 2026-10-29 16:14 UTC in Google ParcelYard2027h1, entry 508,554,182SHA-256 b820552af7b028a0fafd6569ca0de368b404791d7e0aaaffd7f2cfb67ffc7f30Public key SHA-256 a76a79d5860304f63b68b90b1f66c154f5f0464c38eb91a707f61e20035033a6
- Certificate
- Issued by YE1 · precertificateValid 2026-11-02 19:09 UTC to 2027-01-31 19:09 UTCLogged 2026-11-02 20:08 UTC in IPng Networks Gouda2027h1, entry 296,113,019SHA-256 c0987f669bbf99116502bc9a653feea4df14d467ecb8b2f43df392a23b9bec46Public key SHA-256 c78dcf5064395ddf7f4faab6127930002c951d195e2618b1b75753ac2938f65c
- PhishDestroy
- Brand
- Bitget
- Addresses
- 91.199.133.247 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.85.121.4.201 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
- Domain
- bitgetio.icu
- Registered
- 2025-12-03 · Dynadot Inc
- MX
- Receives mail at mx.bitgetio.icu
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 23:38 UTC
- bitget-ai.live US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by CERT PolskaMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for bitget-ai.live
- Hostname
- bitget-ai.live
- First seen
- 2026-10-29 13:46 UTC
- First published
- 2026-10-29 14:18 UTC
- Listing
- CERT Polska listed it 2026-07-22 · first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 09:17 UTC
- DNS
- Resolves · checked 2026-11-04 14:23 UTC
- Listed
- CERT Polska
- Listed by CERT Polska
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-10-29 12:41 UTC to 2027-01-27 13:40 UTCLogged 2026-10-29 13:41 UTC in Google PlumbersArms2027h1, entry 507,270,343SHA-256 3097ece0dc36fd7723c593fb29708791426e95e85333d173de5ddc533175f94ePublic key SHA-256 bcbf8a087ad812f780e6177522761b287a465a58759e56b2e96872a3d33c2a8b
- Brand
- Bitget
- Addresses
- 104.21.26.111 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.135.241 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:1a6f2606:4700:3037::ac43:87f1
- Cloudflare
- Cloudflare (104.21.26.111, 172.67.135.241): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- bitget-ai.live
- Registered
- 2026-07-03 · Eranet International Limited
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 16:53 UTC
- adminapi.bitget.blog US · AS13335 · Cloudflare, Inc.4 addressesReportedCloudflareUnder bitget.blog, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 d ago
DetailsHide details for adminapi.bitget.blog
- Hostname
- adminapi.bitget.blog
- First seen
- 2026-10-29 03:10 UTC
- First published
- 2026-10-29 03:36 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · delisted on 2026-10-30
- DNS
- Resolves · checked 2026-11-05 03:42 UTC
- Reported
- PhishDestroy, listing bitget.blog and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-10-29 02:10 UTC to 2027-01-27 02:10 UTCLogged 2026-10-29 03:08 UTC in Geomys Tuscolo2027h1, entry 389,917,508SHA-256 ceecd426788d6153d0e7e39731787ef2595c88ab1a9049daf92bb4063bfcbcd8Public key SHA-256 78d76c247815bc92afa702ca67cd409a7b0fee3e64c3c03764af358477ec3dd4
- PhishDestroy
- Brand
- Bitget
- Addresses
- 104.21.31.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.176.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:1f712606:4700:3031::ac43:b03f
- Cloudflare
- Cloudflare (104.21.31.113, 172.67.176.63): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- bitget.blog
- Registered
- 2026-10-29 · Go Daddy, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:43 UTC
- h5.bitget.blog US · AS13335 · Cloudflare, Inc.4 addressesReportedCloudflareUnder bitget.blog, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 d ago
DetailsHide details for h5.bitget.blog
- Hostname
- h5.bitget.blog
- First seen
- 2026-10-29 02:57 UTC
- First published
- 2026-10-29 03:36 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · delisted on 2026-10-30
- DNS
- Resolves · checked 2026-11-05 03:42 UTC
- Reported
- PhishDestroy, listing bitget.blog and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-10-29 01:56 UTC to 2027-01-27 01:56 UTCLogged 2026-10-29 02:54 UTC in Google ParcelYard2027h1, entry 498,879,231SHA-256 5f859c7b5032fb84422e2df5b53fbfdebe34823e9d0a7e1c514a40be1496ecacPublic key SHA-256 67856775bc3673eace4fe5c834e8e93dbd03f7efdf1f969b0983312cb2a9a50a
- PhishDestroy
- Brand
- Bitget
- Addresses
- 104.21.31.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.176.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:1f712606:4700:3031::ac43:b03f
- Cloudflare
- Cloudflare (104.21.31.113, 172.67.176.63): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- bitget.blog
- Registered
- 2026-10-29 · Go Daddy, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:43 UTC
- htapi.bitget.blog US · AS13335 · Cloudflare, Inc.4 addressesReportedCloudflareUnder bitget.blog, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 d ago
DetailsHide details for htapi.bitget.blog
- Hostname
- htapi.bitget.blog
- First seen
- 2026-10-29 02:57 UTC
- First published
- 2026-10-29 03:36 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · delisted on 2026-10-30
- DNS
- Resolves · checked 2026-11-05 03:42 UTC
- Reported
- PhishDestroy, listing bitget.blog and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR1 · precertificateValid 2026-10-29 01:53 UTC to 2027-01-27 01:53 UTCLogged 2026-10-29 02:52 UTC in Geomys Tuscolo2027h1, entry 389,779,109SHA-256 013102fd697eaf35bf663a33a0614571a7f6125e6e4a465ce022af51df410168Public key SHA-256 35dfc441faed228b97814fdecf123dee7ab1ada148af48581984922ac4527409
- PhishDestroy
- Brand
- Bitget
- Addresses
- 104.21.31.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.176.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:1f712606:4700:3031::ac43:b03f
- Cloudflare
- Cloudflare (104.21.31.113, 172.67.176.63): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- bitget.blog
- Registered
- 2026-10-29 · Go Daddy, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:43 UTC
- webapi.bitget.blog US · AS13335 · Cloudflare, Inc.4 addressesReportedCloudflareUnder bitget.blog, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 d ago
DetailsHide details for webapi.bitget.blog
- Hostname
- webapi.bitget.blog
- First seen
- 2026-10-29 02:51 UTC
- First published
- 2026-10-29 03:36 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · delisted on 2026-10-30
- DNS
- Resolves · checked 2026-11-05 03:42 UTC
- Reported
- PhishDestroy, listing bitget.blog and the names under it
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YR1Valid 2026-10-29 01:51 UTC to 2027-01-27 01:51 UTCLogged 2026-10-29 02:49 UTC in Google PlumbersArms2027h1, entry 499,510,685SHA-256 2127c18360e670f43b62aa8a0486e4819327e99401bfac56d1fbf13b67df0d29Public key SHA-256 d36111163319d1406349e3479b2cfcd4499611c9c14b3a6f13be007f94b16c0f
- PhishDestroy
- Brand
- Bitget
- Addresses
- 104.21.31.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.176.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:1f712606:4700:3031::ac43:b03f
- Cloudflare
- Cloudflare (104.21.31.113, 172.67.176.63): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- bitget.blog
- Registered
- 2026-10-29 · Go Daddy, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:43 UTC
- bitget.blog US · AS13335 · Cloudflare, Inc.4 addressesReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 7 d ago
DetailsHide details for bitget.blog
- Hostname
- bitget.blog
- First seen
- 2026-10-29 02:46 UTC
- First published
- 2026-10-29 03:36 UTC
- Listing
- PhishDestroy: first observed in the feed 2026-10-25 · delisted on 2026-10-30
- DNS
- Not resolving since 2026-10-29 · checked 2026-11-05 03:42 UTC
- Reported
- PhishDestroy
- Observed in the PhishDestroy feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by YE2 · precertificateValid 2026-10-29 01:46 UTC to 2027-01-27 01:46 UTCLogged 2026-10-29 02:45 UTC in IPng Networks Gouda2027h1, entry 254,913,876SHA-256 1e189f2784616679ff692113f83ef45546edf13d4e7fd6f50580b7e2cf381fcdPublic key SHA-256 f704c983828c631d61728647e7305da259477661462324db5b2a49bf1c242902
- PhishDestroy
- Brand
- Bitget
- Addresses
- 104.21.31.113 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.176.63 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:1f712606:4700:3031::ac43:b03f
- Cloudflare
- Cloudflare (104.21.31.113, 172.67.176.63): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Domain
- bitget.blog
- Registered
- 2026-10-29 · Go Daddy, LLC
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 06:43 UTC
- bitget.uk PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC rejectRegistered 5 y ago
DetailsHide details for bitget.uk
- Hostname
- bitget.uk
- First seen
- 2026-10-28 11:36 UTC
- First published
- 2026-10-28 11:58 UTC
- DNS
- Resolves · checked 2026-11-04 12:09 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.253.212.22.
- Certificate logged in CT
- Phishing-host list fetched with the address
- Resolved to 185.253.212.22
- Latest DNS check
- Certificate
- Issued by YR2Valid 2026-10-28 10:33 UTC to 2027-01-26 10:33 UTCLogged 2026-10-28 11:32 UTC in Google PlumbersArms2027h1, entry 488,204,401SHA-256 d0530787e2b5343c5f211b3b32e832e4130b78bc5e731c1a33ee5829921c16bcPublic key SHA-256 f5e1ef14bfd777ad06e5e8de0a0e060d2a429e703436b076ec79f846f50b49c0
- Brand
- Bitget
- Addresses
- 185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
- Domain
- bitget.uk
- Registered
- 2022-02-08 · Key-Systems GmbH
- MX
- Receives mail at blackhole.aftermarket.pl
- SPF
- SPF record with -all: other senders fail
- DMARC
- DMARC policy p=reject
- Checked
- 2026-11-04 14:35 UTC
- www.bitget-app.live US · AS398256 · Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 d ago
DetailsHide details for www.bitget-app.live
- Hostname
- www.bitget-app.live
- First seen
- 2026-10-28 08:57 UTC
- First published
- 2026-10-28 10:00 UTC
- DNS
- Not resolving since 2026-10-31 · checked 2026-11-05 10:08 UTC
- Checks
- Overdue since 2026-10-31 10:06 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.48.98.
- Certificate logged in CT
- Phishing-host list fetched with the address
- Resolved to 192.142.48.98
- Certificate
- Issued by YR2Valid 2026-10-28 07:55 UTC to 2027-01-26 07:55 UTCLogged 2026-10-28 08:53 UTC in Google ParcelYard2027h1, entry 485,503,220SHA-256 5442dd87894263353d053b7dd8d9d0754b53a7fb5d60033851239e8a7c90cd71Public key SHA-256 0dc268dd81adefdc78e369bd85873bf5031d06c71f11fd775316397f01ae13b1
- Brand
- Bitget
- Addresses
- 192.142.48.98 · United States · AS398256 AS-ULTAHOST - Ultahost, Inc.
- Domain
- bitget-app.live
- Registered
- 2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 13:27 UTC
- webmail.bitget-app.live US · AS398256 · Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 d ago
DetailsHide details for webmail.bitget-app.live
- Hostname
- webmail.bitget-app.live
- First seen
- 2026-10-28 08:57 UTC
- First published
- 2026-10-28 10:00 UTC
- DNS
- Not resolving since 2026-10-31 · checked 2026-11-05 10:08 UTC
- Checks
- Overdue since 2026-10-31 10:06 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.48.98.
- Certificate logged in CT
- Phishing-host list fetched with the address
- Resolved to 192.142.48.98
- Certificate
- Issued by YR2Valid 2026-10-28 07:55 UTC to 2027-01-26 07:55 UTCLogged 2026-10-28 08:53 UTC in Google ParcelYard2027h1, entry 485,503,220SHA-256 5442dd87894263353d053b7dd8d9d0754b53a7fb5d60033851239e8a7c90cd71Public key SHA-256 0dc268dd81adefdc78e369bd85873bf5031d06c71f11fd775316397f01ae13b1
- Brand
- Bitget
- Addresses
- 192.142.48.98 · United States · AS398256 AS-ULTAHOST - Ultahost, Inc.
- Domain
- bitget-app.live
- Registered
- 2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 13:27 UTC
- webdisk.bitget-app.live US · AS398256 · Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 d ago
DetailsHide details for webdisk.bitget-app.live
- Hostname
- webdisk.bitget-app.live
- First seen
- 2026-10-28 08:57 UTC
- First published
- 2026-10-28 10:00 UTC
- DNS
- Not resolving since 2026-10-31 · checked 2026-11-05 10:08 UTC
- Checks
- Overdue since 2026-10-31 10:06 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.48.98.
- Certificate logged in CT
- Phishing-host list fetched with the address
- Resolved to 192.142.48.98
- Certificate
- Issued by YR2Valid 2026-10-28 07:55 UTC to 2027-01-26 07:55 UTCLogged 2026-10-28 08:53 UTC in Google ParcelYard2027h1, entry 485,503,220SHA-256 5442dd87894263353d053b7dd8d9d0754b53a7fb5d60033851239e8a7c90cd71Public key SHA-256 0dc268dd81adefdc78e369bd85873bf5031d06c71f11fd775316397f01ae13b1
- Brand
- Bitget
- Addresses
- 192.142.48.98 · United States · AS398256 AS-ULTAHOST - Ultahost, Inc.
- Domain
- bitget-app.live
- Registered
- 2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 13:27 UTC
- mail.bitget-app.live US · AS398256 · Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 d ago
DetailsHide details for mail.bitget-app.live
- Hostname
- mail.bitget-app.live
- First seen
- 2026-10-28 08:57 UTC
- First published
- 2026-10-28 10:00 UTC
- DNS
- Not resolving since 2026-10-31 · checked 2026-11-05 10:08 UTC
- Checks
- Overdue since 2026-10-31 10:06 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.48.98.
- Certificate logged in CT
- Phishing-host list fetched with the address
- Resolved to 192.142.48.98
- Certificate
- Issued by YR2Valid 2026-10-28 07:55 UTC to 2027-01-26 07:55 UTCLogged 2026-10-28 08:53 UTC in Google ParcelYard2027h1, entry 485,503,220SHA-256 5442dd87894263353d053b7dd8d9d0754b53a7fb5d60033851239e8a7c90cd71Public key SHA-256 0dc268dd81adefdc78e369bd85873bf5031d06c71f11fd775316397f01ae13b1
- Brand
- Bitget
- Addresses
- 192.142.48.98 · United States · AS398256 AS-ULTAHOST - Ultahost, Inc.
- Domain
- bitget-app.live
- Registered
- 2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 13:27 UTC
- cpcontacts.bitget-app.live US · AS398256 · Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 d ago
DetailsHide details for cpcontacts.bitget-app.live
- Hostname
- cpcontacts.bitget-app.live
- First seen
- 2026-10-28 08:57 UTC
- First published
- 2026-10-28 10:00 UTC
- DNS
- Not resolving since 2026-10-31 · checked 2026-11-05 10:08 UTC
- Checks
- Overdue since 2026-10-31 10:06 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.48.98.
- Certificate logged in CT
- Phishing-host list fetched with the address
- Resolved to 192.142.48.98
- Certificate
- Issued by YR2Valid 2026-10-28 07:55 UTC to 2027-01-26 07:55 UTCLogged 2026-10-28 08:53 UTC in Google ParcelYard2027h1, entry 485,503,220SHA-256 5442dd87894263353d053b7dd8d9d0754b53a7fb5d60033851239e8a7c90cd71Public key SHA-256 0dc268dd81adefdc78e369bd85873bf5031d06c71f11fd775316397f01ae13b1
- Brand
- Bitget
- Addresses
- 192.142.48.98 · United States · AS398256 AS-ULTAHOST - Ultahost, Inc.
- Domain
- bitget-app.live
- Registered
- 2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 13:27 UTC
- cpcalendars.bitget-app.live US · AS398256 · Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 d ago
DetailsHide details for cpcalendars.bitget-app.live
- Hostname
- cpcalendars.bitget-app.live
- First seen
- 2026-10-28 08:57 UTC
- First published
- 2026-10-28 10:00 UTC
- DNS
- Not resolving since 2026-10-31 · checked 2026-11-05 10:08 UTC
- Checks
- Overdue since 2026-10-31 10:06 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.48.98.
- Certificate logged in CT
- Phishing-host list fetched with the address
- Resolved to 192.142.48.98
- Certificate
- Issued by YR2Valid 2026-10-28 07:55 UTC to 2027-01-26 07:55 UTCLogged 2026-10-28 08:53 UTC in Google ParcelYard2027h1, entry 485,503,220SHA-256 5442dd87894263353d053b7dd8d9d0754b53a7fb5d60033851239e8a7c90cd71Public key SHA-256 0dc268dd81adefdc78e369bd85873bf5031d06c71f11fd775316397f01ae13b1
- Brand
- Bitget
- Addresses
- 192.142.48.98 · United States · AS398256 AS-ULTAHOST - Ultahost, Inc.
- Domain
- bitget-app.live
- Registered
- 2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 13:27 UTC
- cpanel.bitget-app.live US · AS398256 · Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 d ago
DetailsHide details for cpanel.bitget-app.live
- Hostname
- cpanel.bitget-app.live
- First seen
- 2026-10-28 08:57 UTC
- First published
- 2026-10-28 10:00 UTC
- DNS
- Not resolving since 2026-10-31 · checked 2026-11-05 10:08 UTC
- Checks
- Overdue since 2026-10-31 10:06 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.48.98.
- Certificate logged in CT
- Phishing-host list fetched with the address
- Resolved to 192.142.48.98
- Certificate
- Issued by YR2Valid 2026-10-28 07:55 UTC to 2027-01-26 07:55 UTCLogged 2026-10-28 08:53 UTC in Google ParcelYard2027h1, entry 485,503,220SHA-256 5442dd87894263353d053b7dd8d9d0754b53a7fb5d60033851239e8a7c90cd71Public key SHA-256 0dc268dd81adefdc78e369bd85873bf5031d06c71f11fd775316397f01ae13b1
- Brand
- Bitget
- Addresses
- 192.142.48.98 · United States · AS398256 AS-ULTAHOST - Ultahost, Inc.
- Domain
- bitget-app.live
- Registered
- 2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 13:27 UTC
- bitget-app.live US · AS398256 · Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 d ago
DetailsHide details for bitget-app.live
- Hostname
- bitget-app.live
- First seen
- 2026-10-28 08:57 UTC
- First published
- 2026-10-28 10:00 UTC
- DNS
- Not resolving since 2026-10-31 · checked 2026-11-05 10:08 UTC
- Checks
- Overdue since 2026-10-31 10:06 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.48.98.
- Certificate logged in CT
- Phishing-host list fetched with the address
- Resolved to 192.142.48.98
- Certificate
- Issued by YR2Valid 2026-10-28 07:55 UTC to 2027-01-26 07:55 UTCLogged 2026-10-28 08:53 UTC in Google ParcelYard2027h1, entry 485,503,220SHA-256 5442dd87894263353d053b7dd8d9d0754b53a7fb5d60033851239e8a7c90cd71Public key SHA-256 0dc268dd81adefdc78e369bd85873bf5031d06c71f11fd775316397f01ae13b1
- Brand
- Bitget
- Addresses
- 192.142.48.98 · United States · AS398256 AS-ULTAHOST - Ultahost, Inc.
- Domain
- bitget-app.live
- Registered
- 2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 13:27 UTC
- autodiscover.bitget-app.live US · AS398256 · Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 d ago
DetailsHide details for autodiscover.bitget-app.live
- Hostname
- autodiscover.bitget-app.live
- First seen
- 2026-10-28 08:57 UTC
- First published
- 2026-10-28 10:00 UTC
- DNS
- Not resolving since 2026-10-31 · checked 2026-11-05 10:08 UTC
- Checks
- Overdue since 2026-10-31 10:06 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.48.98.
- Certificate logged in CT
- Phishing-host list fetched with the address
- Resolved to 192.142.48.98
- Certificate
- Issued by YR2Valid 2026-10-28 07:55 UTC to 2027-01-26 07:55 UTCLogged 2026-10-28 08:53 UTC in Google ParcelYard2027h1, entry 485,503,220SHA-256 5442dd87894263353d053b7dd8d9d0754b53a7fb5d60033851239e8a7c90cd71Public key SHA-256 0dc268dd81adefdc78e369bd85873bf5031d06c71f11fd775316397f01ae13b1
- Brand
- Bitget
- Addresses
- 192.142.48.98 · United States · AS398256 AS-ULTAHOST - Ultahost, Inc.
- Domain
- bitget-app.live
- Registered
- 2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 13:27 UTC
- autoconfig.bitget-app.live US · AS398256 · Ultahost, Inc.Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 8 d ago
DetailsHide details for autoconfig.bitget-app.live
- Hostname
- autoconfig.bitget-app.live
- First seen
- 2026-10-28 08:57 UTC
- First published
- 2026-10-28 10:00 UTC
- DNS
- Not resolving since 2026-10-31 · checked 2026-11-05 10:08 UTC
- Checks
- Overdue since 2026-10-31 10:06 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 192.142.48.98.
- Certificate logged in CT
- Phishing-host list fetched with the address
- Resolved to 192.142.48.98
- Certificate
- Issued by YR2Valid 2026-10-28 07:55 UTC to 2027-01-26 07:55 UTCLogged 2026-10-28 08:53 UTC in Google ParcelYard2027h1, entry 485,503,220SHA-256 5442dd87894263353d053b7dd8d9d0754b53a7fb5d60033851239e8a7c90cd71Public key SHA-256 0dc268dd81adefdc78e369bd85873bf5031d06c71f11fd775316397f01ae13b1
- Brand
- Bitget
- Addresses
- 192.142.48.98 · United States · AS398256 AS-ULTAHOST - Ultahost, Inc.
- Domain
- bitget-app.live
- Registered
- 2026-10-28 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 13:27 UTC
- bitget.loveListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for bitget.love
- Hostname
- bitget.love
- First seen
- 2026-10-28 07:56 UTC
- First published
- 2026-10-28 08:43 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Not resolving since 2026-10-28 · checked 2026-11-05 09:05 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-10-28 06:51 UTC to 2027-01-26 07:49 UTCLogged 2026-10-28 07:51 UTC in Let's Encrypt Willow2027h1, entry 810,992,787SHA-256 e0bca589d75edb943ba0e72f62c2426ba210fd478b056c1e470efb8fcbbb093aPublic key SHA-256 f34cea3db627e0af611088b7745582cecea65f59f8b2d5bfe751026fec530a30
- Brand
- Bitget
- Domain
- bitget.love
- Registered
- 2026-07-01 · GoDaddy
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 10:58 UTC
- bitget-help.pages.dev US · AS13335 · Cloudflare, Inc.4 addressesListedCloudflareListed by MetaMask
DetailsHide details for bitget-help.pages.dev
- Hostname
- bitget-help.pages.dev
- First seen
- 2026-10-28 00:05 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 08:59 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- Certificate logged in CT
- We matched its certificate name
- Latest DNS check
- Certificate
- Issued by WE1 · precertificateValid 2026-10-27 23:00 UTC to 2027-01-25 23:57 UTCLogged 2026-10-28 00:00 UTC in Google PlumbersArms2027h1, entry 480,271,379SHA-256 2959ed2f90d3ed964752c5fac9b832c77454711270884ac44e49e68d4c204071Public key SHA-256 48729361a3d7c376cfbfa50d27304b4fb3092913487fc04d3444e18346426c3a
- Brand
- Bitget
- Addresses
- 172.66.44.74 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.47.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:310c::ac42:2c4a2606:4700:310c::ac42:2fb6
- Cloudflare
- Cloudflare (172.66.44.74, 172.66.47.182): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- dapp-bitget.com HK · AS152194 · CTG Server LimitedSpamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 4 mo ago
DetailsHide details for dapp-bitget.com
- Hostname
- dapp-bitget.com
- First seen
- 2026-10-27 14:57 UTC
- DNS
- Resolves · checked 2026-11-05 08:59 UTC
- Spamhaus DROP
- A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 137.220.184.253.
- Spamhaus DROP list fetched with the address
- Resolved to 137.220.184.253
- Latest DNS check
- Certificate
- Logged in Geomys Tuscolo2027h1, entry 371,737,218SHA-256 cd9efc61c379f41639e3d89f7075bf77c4835d5fcee5017b6d833bda9d941ac1
- Brand
- Bitget
- Addresses
- 137.220.184.253 · Hong Kong · AS152194 CTGSERVERLIMITED-AS-AP - CTG Server Limited
- Domain
- dapp-bitget.com
- Registered
- 2026-06-29 · Cloudflare, Inc.
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:31 UTC
- bitget.com.cm US · AS396982 · Google LLCListedGoogle CloudListed by MetaMaskMX absentSPF missingDMARC missingRegistered 7 mo ago
DetailsHide details for bitget.com.cm
- Hostname
- bitget.com.cm
- First seen
- 2026-10-27 14:26 UTC
- Listing
- MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
- DNS
- Resolves · checked 2026-11-05 09:02 UTC
- Listed
- MetaMask
- Observed in the MetaMask feed
- We matched its certificate name
- Latest DNS check
- Certificate
- Logged in Google ParcelYard2027h1, entry 472,571,294SHA-256 86757fd2bc6f630cfb7baebfc947f7ec5737aee9cfb2444ea66aacf64b1bb000
- Brand
- Bitget
- Addresses
- 104.197.133.220 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)
- Google Cloud
- Google Cloud (104.197.133.220): a cloud provider. It rents servers and addresses to its customers.
- Domain
- bitget.com.cm
- Registered
- 2026-04-18 · Netcom.cm Sarl
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:31 UTC
- www.bitgetglobal-support.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for www.bitgetglobal-support.com
- Hostname
- www.bitgetglobal-support.com
- First seen
- 2026-10-26 05:06 UTC
- DNS
- Resolves · checked 2026-11-05 08:59 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
- Phishing-host list fetched with the address
- Resolved to 2.57.91.91
- Latest DNS check
- Certificate
- Logged in DigiCert Wyvern2027h1, entry 313,472,058SHA-256 2bfa743e90d77943c2bea48ddf2fbc825874b88e6451e8f65ef3894ec598f3d8
- Brand
- Bitget
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- bitgetglobal-support.com
- Registered
- 2026-05-13 · HOSTINGER operations, UAB
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:23 UTC
- bitgetglobal-support.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
DetailsHide details for bitgetglobal-support.com
- Hostname
- bitgetglobal-support.com
- First seen
- 2026-10-26 05:06 UTC
- DNS
- Resolves · checked 2026-11-05 09:05 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
- Phishing-host list fetched with the address
- Resolved to 2.57.91.91
- Latest DNS check
- Certificate
- Logged in DigiCert Wyvern2027h1, entry 313,472,058SHA-256 2bfa743e90d77943c2bea48ddf2fbc825874b88e6451e8f65ef3894ec598f3d8
- Brand
- Bitget
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Domain
- bitgetglobal-support.com
- Registered
- 2026-05-13 · HOSTINGER operations, UAB
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-05 08:23 UTC
How certificate findings are selected
Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.
DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Bitget when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

