lobstrloginweb[.]webflow[.]io

PhishDestroy identifies lobstrloginweb.webflow.io as a credential phishing domain designed to steal login credentials from unsuspecting users. This site mimics a legitimate login portal, tricking visitors into entering their usernames and passwords, which are then harvested by attackers. The threat is classified as active and under investigation, indicating ongoing malicious activity rather than a dormant or resolved case. This domain was flagged due to its clear intent to impersonate a known service, combined with technical indicators such as its hosting infrastructure and SSL certificate. VirusTotal currently shows 3 out of 95 security vendors detecting this domain as malicious, highlighting the challenge of identifying new or evasive phishing pages. The domain resolves to IP address 172.64.151.8 and uses a Google Trust Services SSL certificate, which may lend it a false sense of legitimacy. The seed identifier 767bba helps track this specific variant of the campaign. If you visited lobstrloginweb.webflow.io, immediately change your password on the legitimate service and enable two-factor authentication. Scan your device for malware using trusted antivirus software, as credential phishing sites often deliver additional payloads. Report the domain to PhishDestroy using the seed 767bba to help block future attacks. Avoid interacting with this site entirely, as any entered credentials are likely compromised.