mtaesskileiunz[.]webflow[.]io

The domain mtaesskileiunz.webflow.io was registered on February 21, 2026 through NameCheap, Inc. It resolves to the IP address 104.18.36.248, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The TLS certificate presented is issued by Google Trust Services under the WE1 intermediate, indicating standard Cloudflare SSL termination. HTTP requests return a 404 status code and the page title is “404 - Page not found”, confirming that no active content is being served at the time of analysis. VirusTotal records show that 14 of 93 scanning engines have flagged the domain, providing independent confirmation of malicious intent.

The site is currently listed on one public security blocklist and has been added to the PhishDestroy blocklist, demonstrating that multiple anti‑phishing services have taken action. Detected technologies include Cloudflare’s CDN and HTTP/3 support, which are typical for domains hosted on the Cloudflare network. The combination of a recent registration date, a Cloudflare‑hosted IP, a valid SSL certificate, and multiple vendor detections aligns with patterns observed in phishing infrastructure that leverages reputable hosting to gain credibility.

Uncertainty remains regarding the specific payload or credential‑harvesting page because the site returns only a 404 response; it may have been taken offline after detection or could be a placeholder awaiting activation. Defenders should continue to block the domain at network perimeter and DNS filtering layers, monitor for any re‑appearance of the hostname or associated IP address, and consider adding the IP to threat‑intel feeds. Ongoing observation of the registrar’s activity and the blocklist status is advised, as threat actors frequently repurpose Cloudflare‑hosted domains after takedown.