attttverriificatyiooonnn[.]webflow[.]io

PhishDestroy identifies attttverriificatyiooonnn.webflow.io as a confirmed credential theft phishing domain, designed to steal user login credentials through deceptive verification pages hosted on the Webflow platform. Although the site now displays a 404 error, its former purpose was to impersonate legitimate account verification processes. No specific brand was targeted based on available intelligence, but the URL structure mimicking "verification" strongly suggests targeting of generic email or financial services.

Technical indicators from analysis reveal that this domain was flagged by 18 out of 95 security vendors on VirusTotal, and Google Safe Browsing also flagged it as phishing. The domain was registered through NameCheap, Inc. and created on February 21, 2026, resolving to IP 104.18.36.248. It appears on at least one security blocklist, and its SSL certificate was issued by Google Trust Services (WE1). These factors together confirm the malicious intent of the site, despite its offline status.

The current status of the domain is offline, meaning it no longer hosts the phishing page and cannot be accessed. However, PhishDestroy advises continued vigilance as the threat actors may re-register similar domains or host new pages on the same Webflow subdomain. Users who may have visited the site and entered credentials should immediately change those passwords and enable two-factor authentication on all affected accounts. Monitoring for suspicious activity and reporting any similar domains is recommended to prevent future incidents.