lobstrcoin-wallet[.]webflow[.]io

lobstrcoin-wallet.webflow.io is a currently active crypto_drainer domain impersonating the Lobstr cryptocurrency wallet service. This domain is being used to deceive users into connecting their cryptocurrency wallets, enabling the theft of digital assets through malicious smart contract interactions or credential harvesting. The threat is classified as elevated due to the active status and the specific targeting of cryptocurrency users, who may unknowingly authorize transactions that drain their wallets.

This domain was flagged by 3 of 95 VirusTotal security vendors, resolves to IP 104.18.36.248, and holds an SSL certificate issued by Google Trust Services. The domain is hosted on the Webflow platform, which is commonly abused for phishing due to its legitimate appearance and ease of deployment. While specific creation date and blocklist count data are not provided in the available intelligence, the low detection rate among security vendors suggests it may be a recently deployed or evasive campaign. The presence of a valid SSL certificate further enhances its credibility, increasing the likelihood of successful user deception.

Current status indicates an active and ongoing campaign, with users strongly advised to avoid interacting with this domain or any associated links. If this domain was accessed or credentials were entered, users should immediately revoke any connected wallet permissions, transfer remaining funds to a secure wallet, and scan their devices for malware. Block this domain at the network level and report it to relevant authorities (e.g., PhishDestroy, wallet service providers, or local cybercrime units). Always verify the legitimacy of cryptocurrency-related domains by cross-referencing official sources and using multi-factor authentication for wallet access.