cnsqarrlogxn[.]webflow[.]io

PhishDestroy identifies cnsqarrlogxn.webflow.io as an active phishing domain involved in a generic phishing threat, specifically employing fake login tactics to deceive users. This domain does not impersonate a particular brand but aims to harvest sensitive credentials through fraudulent login pages. The elevated risk level assigned to this domain reflects its potential to compromise user security.

According to VirusTotal, 18 out of 95 security vendors have flagged cnsqarrlogxn.webflow.io as malicious. The domain resolves to the IP address 172.64.151.8 and is registered under the registrar Webflow, Inc. It holds a valid SSL certificate issued by Google Trust Services, which may lend it unwarranted credibility. The domain appears on one security blocklist and is specifically blocked by OpenPhish, a recognized phishing intelligence provider. These technical indicators collectively suggest a well-constructed phishing setup designed to bypass basic security filters.

Currently, cnsqarrlogxn.webflow.io remains active and poses an elevated threat to users who encounter it. It is recommended that individuals avoid interacting with this domain and refrain from entering any personal or login information. Security professionals should ensure this domain is blocked at network levels and monitor for any phishing campaigns leveraging this URL. Users are advised to verify any suspicious domains through trusted resources like PhishDestroy before engaging. Continuous vigilance and prompt reporting can mitigate the risks associated with this phishing domain.