qkuicuunllgn[.]webflow[.]io

Analysis conducted on July 29, 2026 identifies qkuicuunllgn.webflow.io as an active generic phishing infrastructure with an elevated risk rating. The domain is hosted on the Webflow platform, as indicated by the registrar information. DNS resolution points to the IP address 172.64.151.8, which belongs to the Cloudflare network and is commonly used for fastly‑delivered web content. No authoritative nameserver records were returned (NS_NOT_FOUND), suggesting that the domain relies on Webflow’s default DNS configuration rather than custom name servers.

VirusTotal reports that 14 of 91 scanned security engines have flagged the domain, providing independent confirmation of malicious intent. The domain is also listed on a single external blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the classification as a phishing resource. No additional intelligence such as page titles, SSL certificate details, or HTTP response codes are available in the current dataset, leaving the exact content of the site unverified.

Given the convergence of multiple detection sources—vendor detections, blocklist inclusion, and targeted blocking—defenders should treat the domain as malicious. Recommended mitigation steps include adding the domain to network and endpoint deny lists, configuring web filters to block HTTP(S) requests to the host, and monitoring for any future resolution changes. Continuous re‑evaluation is advised, as the lack of observable page‑level artifacts means that the site could evolve or serve different payloads without altering the underlying infrastructure.