cryytaonlogonnii[.]webflow[.]io
“Çrypto.com* Login - Sign_In Today Now”
cryytaonlogonnii.webflow.io — Contenu indisponible. Usurpation de l'identité de la marque : Crypto.com; Type d'arnaque : Crypto Scam. Résumé des preuves: VirusTotal 13/94 (ADMINUSLabs, alphaMountain.ai, CyRadar, ESET, Emsisoft); URLQuery 3 alerts; CF Radar malicious; PhishDestroy score 89/100. Bureau d’enregistrement: MarkMonitor.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
On 23 July 2026 the domain cryytaonlogonnii.webflow.io was observed hosting a page titled “Çrypto.com* Login - Sign_In Today Now”. The page title explicitly references Crypto.com, matching the declared brand target. Registration data shows the domain was created on 7 March 2026 and is registered through MarkMonitor, Inc., a registrar commonly used by legitimate enterprises, indicating the attackers leveraged a reputable registrar to increase perceived legitimacy. The site was built on Webflow and served via Cloudflare, with HTTP/3 enabled. DNS resolution points to IP address 172.64.151.8, which belongs to Cloudflare’s AS13335 network located in the United States. An SSL certificate issued by Google Trust Services (common name WE1) is present, confirming that TLS termination is handled by Cloudflare’s edge.
HTTP probing returned a 404 status, suggesting the malicious landing page has been removed or is otherwise inaccessible at the time of analysis. Threat‑intelligence aggregators have flagged the domain. It appears on one security blocklist and is listed as blocked by PhishDestroy. VirusTotal scans recorded 13 detections out of 94 AV engines, indicating a moderate level of consensus among scanners that the site is malicious. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment. The overall classification is a “Crypto Scam” that impersonates Crypto.com, consistent with the page title and brand target.
The current status is marked “offline”, and no live content could be retrieved, limiting the ability to examine the exact phishing mechanics. However, the combination of a brand‑specific page title, reputable registrar, Cloudflare hosting, and multiple vendor detections provides sufficient evidence to treat the domain as malicious. Defenders should block the domain at perimeter defenses, update URL filtering and threat‑intel feeds, and monitor for any related infrastructure that resolves to the same Cloudflare IP range.
Renseignements sur la sécurité réseau
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | cryytaonlogonnii.webflow.io |
malicious | Sinkholed |
| CIRA Canadian Shield DNS | cryytaonlogonnii.webflow.io |
malicious | Sinkholed |
| DNS4EU | cryytaonlogonnii.webflow.io |
malicious | Sinkholed |
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Technologies · 3 identified
Webflow is Software-as-a-Service (SaaS) for website building and hosting.
webflow.com Confiance à 100 %Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confiance à 100 %HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confiance à 100 %Analyse VirusTotal
Preuves archivées
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of cryytaonlogonnii.webflow.io · checked Mar 9, 2026
Données factuelles et rapports externes
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif