blockfi-crypto-logi[.]webflow[.]io

This domain, blockfi-crypto-logi.webflow.io, is flagged for brand impersonation targeting Ethereum users through a fraudulent BlockFi login portal. Analysis indicates the page title "HOME | Blockfi Login | Official Website™" was designed to deceive victims into entering cryptocurrency wallet credentials or private keys, likely leading to unauthorized fund transfers. No explicit drainer kit signatures were identified, but the infrastructure aligns with credential-harvesting campaigns targeting decentralized finance platforms.

Infrastructure analysis reveals the domain was registered via Webflow and resolved to IP 104.18.36.248, hosted on Cloudflare’s network (AS13335). The domain was created on March 11, 2026, and currently holds a VirusTotal detection score of 19/95 security vendors. It appears on one security blocklist and was previously blocked by PhishDestroy. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the fraudulent nature of the site. Google Safe Browsing status was not explicitly provided, but the detection volume suggests prior flagging.

As of the latest verification, the domain has been taken offline, likely due to hosting provider intervention or registrar enforcement. However, residual risk persists as threat actors may re-deploy the infrastructure under new domains or subdomains. Users who interacted with the site are advised to revoke any connected wallet permissions, monitor for unauthorized transactions, and rotate credentials for associated accounts. Organizations should update blocklists with the domain and IP to prevent future access attempts.