bitmartlugins[.]webflow[.]io

This domain, bitmartlugins.webflow.io, is flagged as a generic phishing site designed to impersonate the BitMart cryptocurrency exchange. Analysis indicates it presents a fraudulent login portal titled 'BitMart Login Portal | Your Gateway to Crypto Trading,' likely intended to harvest user credentials for unauthorized access to crypto wallets or trading accounts. No specific drainer kit signatures were identified, but the domain exhibits characteristics consistent with credential-theft phishing campaigns targeting financial platforms. Infrastructure analysis reveals the domain was registered through Webflow and currently resolves to IP address 172.64.151.8. It is detected by 17 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The domain appears on one security blocklist and is protected by a Google Trust Services SSL certificate. Technologies detected include Webflow for hosting, Cloudflare for CDN services, and HTTP/3 for network communication. No creation date was provided, but the domain was recently taken offline following detection. The domain is currently offline, reducing immediate risk to end users. However, residual threats remain, including potential reuse of the infrastructure for future phishing campaigns or the reactivation of the domain under a different guise. Users who may have interacted with this domain are advised to reset credentials for any associated crypto trading accounts and enable multi-factor authentication. Organizations should monitor for similar domains leveraging Webflow or Cloudflare infrastructure to host fraudulent login portals, particularly those targeting financial or cryptocurrency services.