meatkloginsx[.]webflow[.]io

This domain meatkloginsx.webflow.io is assessed as high-risk credential phishing infrastructure designed to capture user login credentials through imitation of authentication portals. The observed page state returning '404 - Page not found' may indicate a deactivated or rotated phishing endpoint commonly used in staging or fallback behavior of phishing kits.

Technical evidence confirms multiple malicious indicators. VirusTotal reports 17/95 security vendors flagging the domain as malicious. The domain was registered through NameCheap, Inc. and created on February 21, 2026. It resolves to IP 172.64.151.8, hosted under AS13335 Cloudflare, Inc., with SSL issued by Google Trust Services / WE1. It appears on 3 security blocklists and is additionally flagged by PhishDestroy, MetaMask, and SEAL, confirming cross-platform detection consensus. Google Safe Browsing explicitly flags the domain as phishing.

Current operational status is taken offline, reducing immediate user exposure; however, historical indicators confirm active credential harvesting intent. Users who previously accessed the domain should assume potential credential compromise and immediately reset passwords, revoke active sessions, and enable multi-factor authentication. Network defenders should ensure the domain and associated IP ranges are blocked at DNS, proxy, and endpoint layers, and review authentication logs for anomalous login attempts originating after exposure. Continuous monitoring for cloned Webflow-hosted phishing pages is recommended due to high replication likelihood.