web-blockfi-auth[.]webflow[.]io

This domain, web-blockfi-auth.webflow.io, is flagged as a high-risk credential phishing threat impersonating BlockFi, a cryptocurrency financial services platform. Analysis indicates the domain is currently active and resolving to IP address 104.18.36.248, hosted by Cloudflare, Inc. in Canada. The SSL certificate is issued by Google Trust Services, and the domain was registered on April 28, 2026, through Webflow. VirusTotal data shows 17 out of 91 security vendors flagging the domain as malicious, and it appears on one security blocklist. The page title is reported as BlockFi - BlockFi, and the Gridinsoft trust score is 0 out of 100, indicating strong suspicion of fraudulent intent. The site uses Webflow for hosting, Cloudflare for content delivery and security, and HTTP/3 protocol. The domain's nameservers are not found, which may complicate takedown efforts. Defenders should block access to this domain at the network level, add it to threat intelligence feeds, and monitor for associated infrastructure. Users should be warned not to visit the site or enter any credentials. The exact visual content of the page has not been analyzed, but the domain's registration and hosting patterns are consistent with phishing operations targeting BlockFi customers.