zeitgeist-2021[.]webflow[.]io

The domain zeitgeist-2021.webflow.io was registered on May 08, 2013 and presently resolves to the Cloudflare address 104.18.36.248 (AS13335, United States). The site returns HTTP 200 and presents a valid SSL certificate issued by Google Trust Services under the WE1 identifier. Page metadata reports the title “zeitgeist | Bold Ads For Bold Brands”. Intelligence classifies the activity as a social‑media phishing campaign that impersonates the Instagram brand. The domain is listed on one public blocklist and has been flagged by PhishDestroy. VirusTotal analysis shows 3 of 95 scanners flag the host, indicating a low‑to‑moderate detection rate. Infrastructure inspection reveals the use of Cloudflare CDN, HTTP/3, and client‑side libraries including YouTube, jsDelivr, Google Analytics, Leadinfo, and Calendly. Registration was performed through MarkMonitor, Inc. The Gridinsoft trust score of 0/100 further underscores the malicious nature. Current status is active; no additional content has been observed beyond the page title. Defenders should block the domain at perimeter and DNS layers, monitor for outbound connections to the resolved IP, and update detection rules to include the observed certificate issuer and the listed technologies. Because the site’s exact payload and credential‑capture mechanisms have not been publicly disclosed, further sandbox analysis is recommended to ascertain the full attack vector.