blofiyanlogin[.]webflow[.]io

The domain blofiyanlogin.webflow.io is currently active and classified as a credential phishing site. Infrastructure analysis shows the domain resolves to IP 104.18.36.248, an address located in Canada and associated with a large content‑delivery network. The site is served over TLS with a certificate issued by Google Trust Services, and it supports HTTP/3. DNS records list journey.ns.cloudflare.com and lamar.ns.cloudflare.com as authoritative name servers. The page title returned by the web server is "BlóckFi $Login ~ Access Your Account Securely," matching the declared scam type. The domain was registered on May 08 2013 through MarkMonitor Inc., and the Gridinsoft trust score is 0 / 100. VirusTotal records indicate that 12 of 91 security vendors flag the domain as malicious, and it is already blocked by PhishDestroy and appears on one external blocklist. While the page content beyond the title has not been publicly examined, the combination of a low trust score, multiple vendor detections, and active hosting of a credential‑phishing login page presents a high‑risk profile. Defenders should block traffic to the domain at the network perimeter, add the domain and its IP address to threat intelligence feeds, and monitor for any outbound connections from internal hosts. Updating URL filtering rules and employing sinkholing for the IP can reduce exposure, and any attempted credential submissions should be logged and investigated.