lobsttrwalletis[.]webflow[.]io

Lobsttrwalletis.webflow.io is a phishing domain designed to mimic the Lobstr Wallet, a platform for managing Stellar assets. The site has been taken down, yet it has already been flagged as malicious by 13 out of 91 vendors on VirusTotal. This domain is also listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL, indicating its recognition as a threat by multiple security entities.

The domain was registered through Webflow and hosted on an IP address managed by Cloudflare, Inc., located in the United States. The SSL certificate was issued by Google Trust Services, which is commonly used by legitimate websites, adding a layer of deceptive credibility to the phishing operation. The platform risk score for this domain is notably high at 85 out of 100, reflecting its potential impact and the sophistication of the scam.

Despite being offline now, the domain's initial detection by PhishDestroy on June 18, 2026, highlights the rapid response in identifying and mitigating such threats. Phishing domains like this one exploit the gap between domain registration and antivirus database updates, often operating within a 24-72 hour window before being widely detected. This underscores the importance of early detection systems that can identify threats before they proliferate. The swift action to take down lobsttrwalletis.webflow.io demonstrates effective collaboration between security platforms and hosting providers to protect users from credential theft and financial loss.