m--sso--bitmrt--ca[.]webflow[.]io

This report analyzes the domain m--sso--bitmrt--ca.webflow.io, which is a credential phishing site. The page title, "Log in to your BitMart® account | BitMart® Exchange," indicates the site impersonated the legitimate cryptocurrency exchange BitMart. The threat posed is the theft of user login credentials, as the site was designed to capture usernames and passwords entered into a fraudulent login form.

Technical evidence confirms the malicious nature of the domain. VirusTotal reported 19 out of 95 vendors flagged the site as malicious, with detections from ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, and ESET. The domain was registered through Webflow on March 12, 2026, and resolves to IP address 172.64.151.8, hosted in the United States on AS13335 (Cloudflare, Inc.). The site uses a WE1 SSL certificate and employs the jQuery technology. The DOM risk score is 78, and GridinSoft and ScamAdviser trust ratings are 0/100 and 1/100, respectively.

As of the latest check, the site is down or offline. The risk level is high due to the confirmed phishing activity, high DOM risk score, and very low trust ratings. Users who may have interacted with this site are advised to change their BitMart credentials immediately.