usbank-verification[.]webflow[.]io

This domain usbank-verification.webflow.io is currently active and has been classified as a high‑risk banking phishing infrastructure. DNS resolution points to the address 172.64.151.8, which is hosted on the Webflow platform; the registrar information confirms the domain was provisioned through Webflow’s automated registration service. The site has been added to a single security blocklist and is actively blocked by the PhishDestroy filtering engine.

Google Safe Browsing has issued a social‑engineering warning, indicating that the URL is likely being used to lure victims into disclosing sensitive information. VirusTotal analysis shows that 15 out of 91 scanned security vendors flagged the domain, reinforcing the suspicion of malicious intent. No additional public intelligence such as page title, SSL certificate details, or HTTP response codes is available at this time, leaving the exact content and credential‑capture mechanisms unverified.

Defenders should treat any traffic to this host as hostile, enforce outbound filtering to block the domain, and monitor for related command‑and‑control patterns associated with the 172.64.151.8 address. Incident response teams should also incorporate the domain into threat‑intel feeds and consider proactive takedown requests through the Webflow abuse channel. Ongoing observation of the IP reputation and any future VirusTotal scans is recommended to refine detection rules.