ledlidgveapp[.]webflow[.]io

Analysis of the domain ledlidgveapp.webflow.io, registered on May 8, 2013, indicates it was flagged for generic phishing activity and is currently offline. The domain resolves to the IPv6 address 2606:4700:440c::ac40:9708, hosted on Cloudflare's infrastructure (AS13335) in the United States. Nameservers journey.ns.cloudflare.com and lamar.ns.cloudflare.com further confirm Cloudflare's involvement in its hosting. The SSL certificate, issued by Google Trust Services (WE1), remains valid, though this does not mitigate the domain's malicious classification.

As of July 24, 2026, the domain returns an HTTP 404 status with the page title '404 - Page not found,' suggesting either takedown or abandonment. Despite this, it appears on one security blocklist (PhishDestroy), and 12 of 95 security vendors on VirusTotal flagged the domain as malicious. The registrar, MarkMonitor, Inc., is consistent with legitimate domains, but this does not preclude abuse. No specific brand impersonation or phishing kit was identified in the available data, and the exact content or target of the phishing attempt remains unconfirmed.

Defenders should treat this domain as a confirmed threat based on its blocklist inclusion and detection by multiple security vendors. Network-level blocking is recommended, particularly for connections to the resolved IPv6 address or Cloudflare-hosted endpoints associated with this domain. Monitoring for re-activation or similar domains using the same infrastructure (e.g., Cloudflare, MarkMonitor registration) is advised. Given the 404 status, further forensic analysis may be limited, but historical logs should be reviewed for prior connections to this domain or its resolved IP.