choihnbeseignin[.]webflow[.]io

PhishDestroy identifies choihnbeseignin.webflow.io as a credential theft phishing site, currently taken offline. This domain was designed to impersonate a legitimate login page to steal user credentials. It was registered through MarkMonitor, Inc. and resolved to IP address 104.18.36.248. The domain was created on May 08, 2013, indicating it is relatively old, which may have been used to evade suspicion.

Technical indicators confirm the malicious nature of this domain. Google Safe Browsing flags it as phishing, and 13 out of 95 VirusTotal vendors classify it as malicious. It appears on one security blocklist. The SSL certificate was issued by Google Trust Services (WE1), providing a false sense of security. The page title was "404 - Page not found," suggesting the site may have been taken down or redirected.

Although the site is currently offline, users who may have encountered it should change their passwords and enable two-factor authentication on any accounts where credentials might have been entered. PhishDestroy recommends blocking this domain at the network level and reporting it to relevant authorities. Users are advised to remain vigilant against similar phishing attempts and to verify URLs before entering sensitive information.