lobsttrwolletus[.]webflow[.]io

lobsttrwolletus.webflow.io is a recently active domain hosting a generic phishing campaign disguised as a lobster roll promotion. The site lures victims with seemingly legitimate offers before redirecting to malicious payloads, likely aiming to harvest credentials or deploy malware. This domain masquerades as a food-related business, exploiting trust in familiar brands to bypass security scrutiny. Users encountering this site may inadvertently compromise their systems or personal data.

PhishDestroy identifies lobsttrwolletus.webflow.io as a high-risk phishing domain with zero detections (18/95) on VirusTotal, indicating it evades most antivirus engines. The domain resolves to IP 104.18.36.248, which is associated with Google Trust Services SSL certificates—a tactic often used to lend legitimacy to phishing pages. While the exact creation date remains unverified, the absence of blocklist entries suggests this campaign is still in its early stages. The lack of detections underscores the need for proactive threat hunting.

If you visited lobsttrwolletus.webflow.io, disconnect from the network immediately and scan for unauthorized processes or malware. Avoid entering any credentials or downloading files from the site. Report the domain to your security team and update blocklists to prevent further exposure. Consider resetting passwords if you submitted information, and monitor accounts for suspicious activity. For future protection, enable browser security features and avoid clicking unsolicited links.