web-bitmaurt-auth-sso[.]webflow[.]io

The domain web-bitmaurt-auth-sso.webflow.io was registered on April 18, 2026 via the Webflow service and resolves to the Cloudflare‑owned address 172.64.151.8 located in Canada. The site is served over HTTPS using a Google Trust Services / WE1 certificate and supports HTTP/3, indicating a modern web stack. Infrastructure analysis shows the presence of Webflow and Cloudflare, with no additional hosting or CDN services detected. Reputation metrics are extremely low: Gridinsoft assigns a trust score of 0 / 100, Scamadviser a score of 1 / 100, and the domain appears on a single security blocklist. PhishDestroy has already listed the domain as blocked, and VirusTotal reports that 18 of 94 scanning engines flag the domain, reinforcing the suspicion of malicious activity. The page title “BitMart® Login® – Secure & Convenient Access to Your Digital” aligns with the known scam type of credential phishing, targeting users of the BitMart service. No further content analysis is available, and the exact phishing payload or data‑exfiltration mechanisms have not been observed. Defenders should treat the domain as high‑risk: block DNS resolution, add the host to URL filtering lists, and monitor outbound traffic for connections to the 172.64.151.8 IP. Continuous re‑assessment is advised in case additional indicators emerge, but current observable evidence supports immediate containment actions.