blokfeloggn[.]webflow[.]io

Analysis indicates that the domain blokfeloggn.webflow.io is currently active and resolves to the IPv4 address 104.18.36.248. The domain is hosted on the webflow.io platform, as indicated by the parent domain, and its authoritative name server information could not be retrieved (NS_NOT_FOUND). VirusTotal reports that 18 out of 91 scanned security vendors have flagged the domain, reflecting a moderate level of detection across multiple engines. The threat classification assigned to the domain is generic_phishing, and the risk level is marked as high. The combination of active resolution, the presence of multiple vendor detections, and the phishing label suggests that the domain is being used to lure victims into credential harvesting or other malicious activities. No additional infrastructure details such as ASN, registrar, or certificate information are available from the supplied intelligence, limiting further attribution. Defenders should consider adding the domain to blocklists at network perimeters and endpoint protection solutions, monitor DNS queries for lookups to 104.18.36.248, and enforce user awareness training to reduce the likelihood of successful phishing attempts. Continuous re‑evaluation is advised, as the domain remains active and may evolve its tactics.