allora[.]webflow[.]io

This domain, allora.webflow.io, is currently flagged as a high‑risk credential‑phishing site. Infrastructure analysis shows it is hosted on Cloudflare (AS13335) with the public address 172.64.151.8 and the DNS resolvers journey.ns.cloudflare.com and lamar.ns.cloudflare.com. The site presents a valid SSL certificate issued by Google Trust Services (WE1), which may lend an appearance of legitimacy. The page title returned from the HTTP 200 response is “Allora – Webflow HTML Website Template”, indicating the underlying site is a Webflow template rather than a genuine service. The technology fingerprint includes Webflow, Google Hosted Libraries, Google Font API, and HTTP/3, all typical of a template‑based deployment. Registration data reveals the domain was created on 08 May 2013 and is registered through MarkMonitor, Inc., a registrar often used by legitimate enterprises. Despite the legitimate‑looking registration, the domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans show 2 of 91 security vendors flag the domain, and Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. Defenders should treat any traffic to this host as hostile. Immediate actions include adding the domain to network‑level deny lists, configuring email filters to quarantine messages containing the URL, and monitoring for credential‑theft activity targeting accounts that may be lured to the site. Because the content of the page has not been crawled in this report, further inspection of the landing page is recommended to confirm the phishing payload, but the existing technical indicators are sufficient to justify proactive blocking.