sbcverify-f0f7ef[.]webflow[.]io

Analysis indicates that sbcverify-f0f7ef.webflow.io was registered on 2026-07-01 via a Webflow-provided registration service and immediately resolved to the Cloudflare edge address 172.64.151.8, a host associated with AS13335. The site serves content over HTTPS using a Google Trust Services certificate and supports HTTP/3, confirming the presence of Cloudflare’s CDN. Google Safe Browsing has classified the URL under the SOCIAL_ENGINEERING category, and the domain appears on the PhishDestroy blocklist. VirusTotal scans show 19 of 91 security vendors flag the site, reinforcing the suspicion of malicious activity. The HTTP response code is 200, indicating that the page is currently reachable and active.

The limited public metadata includes a page title of “sbcverify,” but no additional content has been disclosed. Consequently, while the infrastructure points to a typical credential‑phishing deployment—leveraging a legitimate hosting platform to obscure ownership—specific payloads, target brands, or credential‑collection mechanisms have not been publicly observed. Defenders should add the domain to URL filtering policies, block traffic to the resolved IP, and monitor for related login attempts or credential submissions. Continuous re‑scanning is advised to detect any changes in the site’s content or detection profile.