bitmmatalogi[.]webflow[.]io

This domain, bitmmatalogi.webflow.io, is identified as a credential phishing site specifically targeting users of the BitMart cryptocurrency exchange. The site mimics legitimate BitMart login portals to deceive victims into submitting sensitive account credentials, including usernames, passwords, and potentially two-factor authentication codes. Analysis confirms the domain is currently offline, though prior activity indicates an elevated risk of financial fraud and unauthorized account access for users who engaged with the site. Infrastructure analysis reveals the domain was registered through Webflow, a platform commonly exploited for rapid deployment of phishing pages due to its ease of use and free hosting options. The domain is flagged by 19 of 95 security vendors on VirusTotal, with detection signatures including generic phishing, brand impersonation, and malicious web content. It appears on one security blocklist and resolves to the IP address 172.64.151.8, geolocated to a Cloudflare, Inc. node in Canada. The page title, 'BitMart Login: How to Access Your Account SecurelyIntroduction,' further corroborates the intent to impersonate BitMart’s official login interface, a tactic designed to lower user suspicion. The domain’s current offline status reduces immediate risk, though historical exposure remains a concern for users who may have interacted with the site prior to takedown. Organizations and individuals are advised to review access logs for connections to 172.64.151.8 and the domain itself, particularly in environments where cryptocurrency transactions occur. Users who entered credentials on this site should immediately reset passwords, enable multi-factor authentication, and monitor accounts for unauthorized activity. Network administrators should update blocklists to include this domain and its associated IP to prevent future access attempts. Given the persistent nature of phishing infrastructure, vigilance is recommended for similar domains leveraging Webflow or Cloudflare hosting.