bitmartlogins[.]webflow[.]io

bitmartlogins.webflow.io is a live credential phishing site masquerading as the BitMart cryptocurrency exchange login portal. The domain uses a Google Trust Services SSL certificate and resolves to IP 172.64.151.8 to appear legitimate, but it has already tricked users into surrendering their BitMart usernames and passwords. PhishDestroy identifies this domain as actively harvesting credentials with an elevated risk rating. This domain was flagged by 13 out of 95 VirusTotal security vendors upon inspection. The domain sits on the Webflow.io platform under a recently created account, leveraging the platform’s trusted infrastructure to bypass domain-reputation filters. Webflow’s general allowance of subdomains enables quick deployment of spoofed login pages, a common tactic in active credential-phishing campaigns. If you visited bitmartlogins.webflow.io, assume your BitMart credentials may have been compromised. Log in to BitMart from the official bitmart.com site, enable two-factor authentication immediately, and change your password. Scan all connected devices for malware, revoke any unfamiliar API keys, and report the incident to BitMart support. Forward any suspicious emails or links to your security team for further analysis.