flagship-web3-v1[.]webflow[.]io

This domain is assessed as an elevated-risk credential theft campaign infrastructure designed to target cryptocurrency users by presenting a deceptive interface intended to capture authentication data or wallet-related credentials. The content labeled “Home V2” is consistent with templated phishing pages used to mask malicious intent under generic landing page structures.

Technical intelligence confirms multiple risk indicators. VirusTotal reports 5/95 security vendors flagging the domain. The domain was created on June 08, 2026 and is registered through Webflow. It resolves to IP 172.64.151.8 and uses SSL issued by Google Trust Services. The domain appears on 4 security blocklists and is actively blocked by MetaMask, PhishDestroy, SEAL, and ScamSniffer. Current status is taken offline.

If a user interacted with this domain, immediate risk mitigation is required. Any entered wallet credentials, seed phrases, or login data should be considered compromised. Users should immediately move digital assets to a newly generated wallet using a trusted offline environment. Browser extensions and connected sessions should be reviewed for unauthorized access. Security controls should block the domain and IP 172.64.151.8, and detection rules should incorporate indicators including Webflow hosting patterns, Google Trust Services certificates, and the observed 5/95 VirusTotal detection ratio. Continuous monitoring is recommended due to potential re-deployment using similar infrastructure templates.