bitmartlogiine[.]webflow[.]io

This domain, bitmartlogiine.webflow.io, is flagged for generic_phishing. The domain mimics the BitMart brand, a well-known cryptocurrency exchange, and is suspected to be part of a credential harvesting campaign. No drainer kit has been identified, but the domain's structure and naming suggest a deliberate attempt to deceive users into believing they are accessing a legitimate BitMart login page.

Infrastructure analysis reveals that bitmartlogiine.webflow.io has been flagged by 18 out of 95 security vendors on VirusTotal, indicating a moderate level of suspicion among security experts. The domain is registered through MarkMonitor, Inc., and resolves to an IP address (172.64.151.8) located in the United States, managed by Cloudflare, Inc. The domain was created on March 05, 2026, and currently appears on 1 security blocklist. The SSL certificate is issued by Google Trust Services, which may provide a false sense of security to unsuspecting users.

The domain is currently offline, having been taken down as a response to phishing allegations. However, the PhishDestroy service has blocked it, indicating that preventive measures are in place. Despite the domain's offline status, the risk remains elevated due to its potential to be reactivated or used in similar phishing campaigns. Continuous monitoring and user education on recognizing phishing attempts are recommended to mitigate any residual risk.