bitmart-login-en[.]blogspot[.]com

This domain is flagged as an elevated-risk credential phishing site designed to harvest BitMart account credentials. Analysis indicates the domain mimics legitimate cryptocurrency exchange login portals, tricking users into submitting sensitive information such as usernames, passwords, and two-factor authentication codes. The threat is classified as credential phishing due to its deceptive infrastructure and direct targeting of financial account access. Infrastructure analysis reveals multiple technical indicators supporting this assessment. The domain bitmart-login-en.blogspot.com resolves to IP address 142.251.140.161, hosted under AS15169 (Google LLC) in the United States. It is registered through MarkMonitor, Inc., with a creation date of February 21, 2026, suggesting recent malicious registration. Security vendors on VirusTotal flagged the domain at 18/95 detection ratio, while PhishDestroy and one additional blocklist have already listed it. The SSL certificate is issued by Google Trust Services (WE2), a common tactic to lend false legitimacy to phishing pages. The page title, 'BitMart Login — How to Sign In, Troubleshoot & Secure Your Account,' further confirms the intent to deceive users seeking legitimate account support. Mitigation against this credential phishing threat requires immediate action from both end users and security teams. Users should avoid interacting with the domain and report any suspicious login prompts to their security providers. Organizations should update blocklists to include this domain and its associated IP address. Multi-factor authentication (MFA) should be enforced for all financial and cryptocurrency accounts to reduce the impact of credential theft. Security teams are advised to monitor for similar impersonation patterns, such as subdomains or blogspot-hosted pages mimicking legitimate services, and deploy automated detection rules to identify and neutralize such threats. Proactive user education on recognizing phishing tactics remains critical to preventing successful compromises.