bitbmarthlogin[.]webflow[.]io

This domain, bitbmarthlogin.webflow.io, is confirmed as a phishing site impersonating BitMart, a popular cryptocurrency exchange platform. The threat specifically targets users who are looking to buy, sell, or manage their Bitcoin holdings, aiming to steal login credentials and financial information.

Analysis indicates that the domain was created on February 21, 2026, and is registered through NameCheap, Inc. The domain resolves to the IP address 172.64.151.8, which is located in the United States and is associated with AS13335 Cloudflare, Inc. The SSL certificate for the domain is issued by Google Trust Services / WE1, which may lend a false sense of security to unsuspecting users. VirusTotal reports that 17 out of 95 security vendors flag this domain as malicious, and it appears on 1 security blocklist. The domain has been taken offline and is currently blocked by PhishDestroy, a known security service.

If users have visited bitbmarthlogin.webflow.io, they are advised to immediately change their BitMart account passwords and enable two-factor authentication (2FA) to enhance account security. It is also recommended to monitor financial accounts for any unauthorized transactions and to report the incident to BitMart's customer support. Users should be cautious of unsolicited emails or messages directing them to unfamiliar login pages and verify the URL of any cryptocurrency exchange platform before entering sensitive information.