new-bitmert--sso[.]gitbook[.]io

This domain, new-bitmert--sso.gitbook.io, poses a significant risk of credential theft. It mimics the login page of BitMart, a legitimate cryptocurrency exchange, in an attempt to deceive users into revealing their login credentials. Once users enter their credentials, the attackers can gain unauthorized access to their BitMart accounts, potentially leading to financial loss and unauthorized transactions.

Analysis indicates that 18 out of 95 security vendors on VirusTotal have flagged this domain as a threat. The domain was created on March 10, 2026, and is registered through Cloudflare, Inc. The infrastructure analysis reveals that the domain resolves to the IP address 172.64.147.209, which is located in the United States and is part of the Cloudflare, Inc. network (AS13335). The SSL certificate used on the site is issued by Google Trust Services, which may lend a false sense of security to unsuspecting users.

If a user has visited new-bitmert--sso.gitbook.io, they are advised to immediately change their BitMart login credentials and enable two-factor authentication (2FA) to secure their account. Additionally, users should monitor their account for any unauthorized activity and report any suspicious transactions to BitMart's customer support. It is also recommended to run a full system scan using up-to-date antivirus software to ensure that no malware was installed during the visit.