lobstrewalart[.]webflow[.]io

This domain, lobstrewalart.webflow.io, is identified as a high-risk phishing site specifically designed to impersonate Lobstr Wallet, a cryptocurrency wallet service. The page title, 'Lobstr Wallet | Ṥupported Cryptocurrencies,' contains a Unicode character substitution (Ṥ for S) to evade basic detection mechanisms while mimicking legitimate branding. Analysis indicates the domain is engineered to harvest cryptocurrency wallet credentials, seed phrases, or private keys under the guise of supported cryptocurrency services. The inclusion of terms like 'supported cryptocurrencies' in the title suggests an attempt to lure victims into entering sensitive information on a fraudulent interface. Evidence supporting this assessment includes detection by 13 out of 95 security vendors on VirusTotal, indicating a consensus among multiple threat intelligence sources. The domain was registered on May 06, 2026, through Webflow, a platform often exploited for rapid deployment of phishing sites due to its ease of use. Infrastructure analysis reveals the domain resolves to the IP address 104.18.36.248, a Cloudflare-protected endpoint, which is frequently leveraged to obfuscate malicious infrastructure. Additionally, the domain appears on three security blocklists, and its Gridinsoft trust score is 0/100, further confirming its malicious nature. The SSL certificate, issued by Google Trust Services, provides a false sense of security to potential victims. Users who have visited lobstrewalart.webflow.io or entered any credentials on the site should immediately revoke access to any associated cryptocurrency wallets and generate new seed phrases. All passwords and private keys linked to the compromised session must be considered exposed and invalidated. It is recommended to monitor wallet transactions for unauthorized activity and report the incident to relevant cryptocurrency security teams. If financial loss has occurred, victims should contact their local cybercrime authorities to file a report. Proactive measures, such as enabling multi-factor authentication on all cryptocurrency accounts and verifying domain authenticity before entering sensitive information, are strongly advised to mitigate future risks.