What happened
The urlDNA scanning service posted on Mastodon on 11 November 2026 that hxxps://wallet-magiceden-io.webflow.io is a possible phishing page, linking its scan. The domain also appears on the Phishing Army extended blocklist, a public phishing domain blocklist. The page uses the name of Magic Eden, the NFT marketplace and crypto wallet. webflow.io is a shared hosting domain; only this subdomain is reported here, and Webflow and Magic Eden are not the operators. Never connect a wallet or enter a recovery phrase on sites reached from links.
How the scam works
Wallet and exchange phishing pages often follow an email, comment or advert that says you must confirm your account, update an app or claim a token credit. The page may ask for a recovery phrase, a private key or a password. Official wallet apps and hardware devices never need those words to be typed into a website. Close the page, open only the official app or a bookmark you already use, and if you entered a phrase treat the wallet as compromised and move funds to a new wallet whose phrase you created offline, if you still can.
wallet-magiceden-io.webflow.io is a Webflow site, not the official Magic Eden wallet. Magic Eden and Webflow were not the operators of this page; Magic Eden was impersonated and is not involved. Other wallet lures flagged the same day include a Trust Wallet look-alike domain and a fake Ledger Live download page.
Source
Public post on Mastodon, 11 November 2026: https://infosec.exchange/@urldna/117597340575842767
The indicators come from this source and have not been independently checked by scammers.com.
