kulcnilog[.]webflow[.]io

PhishDestroy identifies kulcnilog.webflow.io as an active phishing site leveraging a fraudulent Webflow subdomain to impersonate legitimate Google Trust Services SSL certificates. The domain resolves to IP 104.18.36.248 and displays a valid Google Trust Services certificate, tricking users into believing they are interacting with a secure Google domain. This technique exploits the trust associated with Google’s SSL infrastructure to harvest credentials and sensitive data under false pretenses. This domain was flagged by OpenPhish and 18 of 95 VirusTotal security vendors. It appears on 1 security blocklist and uses a Google Trust Services SSL certificate to enhance credibility. The domain’s structure mimics legitimate services, exploiting Webflow’s subdomain hosting to bypass traditional domain reputation checks. Security intelligence confirms its elevated risk status, with active redirection or content mirroring known phishing lures. If you visited kulcnilog.webflow.io, assume your data was compromised. Do not enter credentials or sensitive information on this site. Immediately run a malware scan on your device and change passwords for any accounts that may have been exposed. Report this domain to your IT security team or the platform hosting the phishing content for takedown. Avoid clicking any links from this domain in the future.