metamuskkchromextinson[.]webflow[.]io

Analysis of the domain metamuskkchromextinson.webflow.io indicates that it is currently active and has been observed on a single security blocklist. The domain resolves to the IP address 104.18.36.248, which is owned by Cloudflare and commonly used for content delivery and masking of origin infrastructure. Registration information shows the domain was created through Webflow, Inc., a legitimate website‑building platform, and the registrar details are publicly available. The domain is listed as blocked by PhishDestroy, confirming that at least one anti‑phishing service has taken action against it.

VirusTotal records reveal that the URL was scanned by 91 antivirus and URL‑reputation engines, with none of those engines generating a detection at the time of analysis; this absence of detections does not constitute evidence of benign intent. The nameserver query returned NS_NOT_FOUND, suggesting that standard DNS delegation records are missing or obscured, a tactic sometimes employed to hinder attribution. No additional intelligence such as page title, brand targeting, or specific phishing kit fingerprints is presently available, leaving the exact lure or victim profile undefined.

Defenders should treat the domain as hostile, enforce network‑level blocking, and monitor DNS queries for any resolution to the associated Cloudflare IP. Continuous re‑scanning with multi‑engine services is advised to capture any future changes in payload or detection status. Organizations using web‑filtering solutions should add the domain to blocklists and consider sinkholing traffic to prevent potential credential harvesting or malware delivery.