blokfelogon[.]webflow[.]io

The domain blokfelogon.webflow.io has been identified as a confirmed brand impersonation phishing site, currently taken offline. This domain specifically targeted users of BlockFi, a well-known digital money exchange, by presenting a fraudulent login page titled "BlóckFi Login: Digital Money Exchange" designed to steal credentials. The threat level was assessed as elevated due to the sophisticated impersonation and the domain's presence on one security blocklist.

Technical analysis reveals that blokfelogon.webflow.io was registered through NameCheap, Inc. and created on February 21, 2026, with a short lifespan before being taken offline. The domain resolved to IP address 172.64.151.8 and used an SSL certificate from Google Trust Services (WE1). Crucially, VirusTotal flagged this domain as malicious, with 16 out of 95 security vendors detecting it as a threat, indicating broad industry recognition of its phishing nature. Despite being offline, the domain's registration details and hosting infrastructure provide valuable indicators for threat intelligence.

Given its confirmed phishing status and the specific impersonation of BlockFi, users who may have interacted with this site should immediately change their BlockFi credentials and enable two-factor authentication. PhishDestroy recommends monitoring accounts for unauthorized activity and reporting any suspicious login attempts. While the site is currently offline, similar domains may emerge, so vigilance against unsolicited login pages is advised. Always verify URLs directly with the official BlockFi website before entering sensitive information.