bittbartihlogin[.]webflow[.]io

This domain, bittbartihlogin.webflow.io, is identified as a credential phishing site specifically impersonating BitMart, a cryptocurrency exchange platform. The threat type is classified as brand impersonation with an elevated risk level. As of the latest assessment, the domain has been taken offline, though prior activity indicates malicious intent to harvest user credentials. Analysis indicates the domain was flagged by 20 of 95 security vendors on VirusTotal, signaling broad detection of its fraudulent nature. Registered through Webflow, the domain was created on May 11, 2026, and resolved to the IP address 172.64.151.8, associated with Cloudflare, Inc. in Canada. The SSL certificate is issued by Google Trust Services under the WE1 intermediate. The domain appears on one security blocklist and was actively blocked by a phishing-specific detection system. Current infrastructure analysis confirms the domain is no longer accessible, mitigating immediate risk. However, organizations and users are advised to monitor for similar impersonation attempts, particularly those leveraging Webflow-hosted subdomains. Network defenders should update blocklists to include this domain and investigate logs for prior connections. Users who may have interacted with the site should reset credentials for BitMart and enable multi-factor authentication on all cryptocurrency exchange accounts.