suo-ico--trustcapital----com--autth[.]webflow[.]io

The domain suo-ico--trustcapital----com--autth.webflow.io is currently active and resolves to the IPv4 address 172.64.151.8. No authoritative name servers are reported, indicating that the domain’s DNS configuration may be using Cloudflare’s default or hidden settings. VirusTotal scans have returned 17 detections out of 91 security vendors, suggesting that multiple AV engines have identified malicious characteristics associated with the host. The classification supplied is generic_phishing, implying that the site is likely being used to solicit credentials or personal data. Infrastructure analysis shows a single IP address shared by other Webflow‑hosted sites, which can impede attribution but also provides a clear network indicator for blocking. At this time, no additional contextual data such as page titles, brand impersonation, or payload samples have been disclosed, leaving the exact lure and attack flow uncertain. Defenders should proactively block the domain and its resolving IP at perimeter and endpoint layers, monitor DNS queries for similar patterns, and consider adding the hash‑based detection signatures from VirusTotal to their detection suites. Continuous re‑scanning is advised to capture any changes in the site’s content or hosting configuration.