# bitmartleogene.webflow.io — MALICIOUS

> bitmartleogene.webflow.io flagged by 6 of 95 VirusTotal vendors for credential phishing. Check the full report.

## Summary
PhishDestroy identifies bitmartleogene.webflow.io as an active malicious domain impersonating BitMart exchange for credential theft. The domain is currently operational with an elevated risk rating of 6/95 security vendors on VirusTotal.  

This domain resolves to IP 172.64.151.8 with a Google Trust Services SSL certificate. It was registered under Cloudflare, Inc. with no publicly available creation date. The domain has been flagged by 6 of 95 VirusTotal vendors and remains unblocked by major threat intelligence feeds.  

PhishDestroy recommends immediate domain blocking with IP disconnection. Users should avoid all interactions with bitmartleogene.webflow.io and report any access attempts. Security teams should investigate 172.64.151.8 for potential lateral movement. The domain's Google-issued SSL certificate requires immediate distrust revocation.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 172.64.151.8

## Detection Status
- VirusTotal: 6 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/147700ef-ee78-4f15-b2c5-d9be62faa5e2
- PhishDestroy: https://phishdestroy.io/domain/bitmartleogene.webflow.io/
- LLM endpoint: https://phishdestroy.io/domain/bitmartleogene.webflow.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/bitmartleogene.webflow.io/
Last updated: 2026-03-22