bitmarteloegene[.]webflow[.]io

This domain, bitmarteloegene.webflow.io, operates as a crypto credential theft scam designed to impersonate the legitimate BitMart cryptocurrency exchange. The site presents a fraudulent login interface titled 'BITMART LOGIN | Access Your Crypto Portfolio,' aiming to deceive users into entering their account credentials. Once submitted, these credentials are harvested by threat actors, granting unauthorized access to victims' crypto wallets and funds. The risk is elevated due to the direct financial impact and the irreversible nature of cryptocurrency transactions. Analysis indicates this domain is part of a coordinated phishing campaign. The site was created on March 06, 2026, and registered through MarkMonitor, Inc., a registrar commonly used for both legitimate and malicious domains. Infrastructure analysis reveals it resolves to the IP address 172.64.151.8, hosted on Cloudflare's network (AS13335). Detection data from VirusTotal shows that 19 out of 95 security vendors have flagged this domain as malicious, confirming its classification as a credential theft operation. Additionally, the domain appears on one security blocklist and is currently offline, though this does not eliminate the risk for users who may have interacted with it prior to takedown. Users who visited bitmarteloegene.webflow.io or entered credentials on the site should take immediate action to mitigate potential damage. First, revoke any active sessions or authorized applications linked to the legitimate BitMart platform. Next, transfer remaining funds to a new, secure wallet address not previously associated with the compromised account. Enable multi-factor authentication (MFA) on all crypto-related accounts to add an additional layer of security. Monitor transaction histories for unauthorized activity and report the incident to the legitimate exchange. Given the irreversible nature of cryptocurrency transactions, prompt action is critical to prevent further loss.