zillepaysupportnumber[.]webflow[.]io

On July 24, 2026, an investigation was conducted for the domain zillepaysupportnumber.webflow.io. The domain was registered on March 02, 2026 through Cloudflare, Inc. and resolves to the IP address 104.18.36.248, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site served a TLS certificate issued by Google Trust Services under the WE1 intermediate, indicating the use of standard Cloudflare‑provided HTTPS. An HTTP request returned a 404 status code, and automated analysis identified the use of Webflow, jQuery, Cloudflare and HTTP/3 as underlying technologies.

The page title retrieved from the host reads “Zellepay Support Number | A fast way to send money | Zellepay Login | Zellepay Login error”, matching the generic phishing classification supplied in the intelligence. VirusTotal recorded 14 detections out of 93 scanned security vendors, and the domain is listed on a single external blocklist and has been actively blocked by the PhishDestroy service. Independent scoring from Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious assessment.

The current operational status is offline, and no further content is presently reachable. While the observed indicators confirm the domain’s involvement in credential‑phishing targeting the Zellepay brand, the lack of live content limits deeper behavioral analysis. Defenders should continue to block the domain at DNS and proxy layers, monitor for any re‑hosting attempts on other Cloudflare‑backed addresses, and update threat‑intel feeds with the observed IoC set, including the registrar, IP, TLS fingerprint, and detection counts.