beitmaartlogiin[.]webflow[.]io

Analysis of beitmaartlogiin.webflow.io shows an active site delivering a page titled “BitMart login | Bitmart - Cryptocurrency Exchange”. The HTTP response code is 200 and the TLS certificate is issued by Google Trust Services (WE1). Infrastructure resides behind Cloudflare (AS13335) with the origin IP 172.64.151.8 located in the United States. The domain was registered on 18 June 2026 through the Webflow platform and uses Webflow, jQuery, Cloudflare and HTTP/3 on the front end. VirusTotal reports 16 of 91 scanners flagging the host, and the domain is listed on at least one public blocklist and has been blocked by PhishDestroy. The threat is classified as a fake exchange phishing campaign targeting cryptocurrency users. No additional intelligence such as observed credential harvesting or malicious payloads is currently available. Defenders should treat the domain as high‑risk, enforce network‑level blocking, add the hostname to endpoint and email filters, and monitor for related DNS queries or HTTP traffic. Continuous threat‑intel feeds should be consulted for any emerging indicators tied to the IP address or associated Webflow accounts.