hlpdssskk[.]webflow[.]io

This report details the technical threat assessment for the domain hlpdssskk.webflow.io. The site, titled "HLPDSSSKK," presents no clear brand or identifiable service, suggesting it may be a generic or placeholder page used for malicious purposes. The threat posed is currently unverifiable due to the site being offline, but the high number of vendor detections indicates it was likely used for phishing, malware distribution, or other cybercriminal activities.

Technical evidence from VirusTotal shows 11 out of 95 security vendors flagged the domain as malicious, including alphaMountain.ai, BitDefender, CyRadar, ESET, and Forcepoint ThreatSeeker. The domain is hosted on IP 172.64.151.8 in the United States, assigned to AS13335 Cloudflare, Inc. It was registered through MarkMonitor, Inc. on 2013-05-08 and uses SSL certificates from Google Trust Services / WE1. Nameservers are journey.ns.cloudflare.com and lamar.ns.cloudflare.com. The domain is also listed on two blocklists.

As of the latest analysis, the site is DOWN/OFFLINE, rendering it inaccessible. The risk level is considered high based on the 11/95 detection rate and blocklist presence, but immediate exploitation is limited due to its offline status.