lognkrrkebn[.]webflow[.]io

Analysis of lognkrrkebn.webflow.io indicates a high-risk phishing domain currently offline but previously active under Cloudflare infrastructure. The domain was registered through NameCheap, Inc. on February 21, 2026, and resolves to IP 172.64.151.8, part of AS13335 (Cloudflare, Inc.) in the United States. At the time of assessment, the domain returns an HTTP 404 status with the page title '404 - Page not found,' suggesting the phishing content has been removed or the site is no longer serving its intended malicious payload. Detection data reveals the domain appears on one security blocklist, with PhishDestroy actively blocking it.

Google Safe Browsing flags it for social engineering, and Gridinsoft assigns a trust score of 0/100. Sixteen of 93 security vendors on VirusTotal flag the domain, though the specific nature of the phishing campaign remains unconfirmed due to the absence of visible content. The SSL certificate is issued by Google Trust Services (WE1), and the site employs Cloudflare technologies, including HTTP/3. Defenders should treat this domain as compromised infrastructure.

While the current HTTP 404 response may indicate takedown or evasion, the prior detection history and hosting on a known content delivery network used for phishing warrant continued monitoring. Network-level blocks at 172.64.151.8 or AS13335 may mitigate residual risk, particularly if the domain reactivates. No brand-specific targeting or phishing kit details are available from the provided evidence, limiting attribution to a generic phishing classification.