meowthcoin[.]webflow[.]io

This domain, meowthcoin.webflow.io, operates as a fraudulent cryptocurrency wallet phishing site designed to steal login credentials and private keys. Analysis indicates the site mimics legitimate wallet interfaces to trick users into entering sensitive information, which is then harvested by threat actors. The domain specifically targets users of decentralized finance platforms, presenting itself as a genuine service to facilitate unauthorized access to digital assets. Infrastructure analysis reveals the domain was registered through Webflow and currently resolves to IP address 172.64.151.8, hosted on Cloudflare infrastructure (AS13335). The site uses a Google Trust Services SSL certificate (WE1) and displays a generic 'Home' page title. While VirusTotal shows 0/95 security vendor detections, the domain appears on 3 independent security blocklists and is actively blocked by multiple cryptocurrency security providers. The site remains operational as of this report. Users who have visited meowthcoin.webflow.io should immediately revoke any connected wallet permissions and transfer assets to a new wallet address. Change all passwords associated with cryptocurrency accounts and enable multi-factor authentication where available. Monitor account activity for unauthorized transactions and consider reporting the incident to relevant blockchain security teams. Do not interact with any links or prompts from this domain, as they may contain additional malicious payloads. Security teams should add the domain and IP 172.64.151.8 to blocklists for proactive protection.