crakenuslogz-14119b[.]webflow[.]io

The domain crakenuslogz-14119b.webflow.io is a phishing site engaged in brand impersonation targeting Kraken, a cryptocurrency exchange. It posed an elevated risk by mimicking Kraken's login page to harvest user credentials, though no drainer kit was identified. As of the latest verification, crakenuslogz-14119b.webflow.io has been taken offline, but prior activity classified it as a cryptocurrency scam.

Technical indicators confirm the malicious nature of crakenuslogz-14119b.webflow.io. The domain was flagged by 13 of 95 VirusTotal security vendors, including ADMINUSLabs, ChainPatrol, and alphaMountain.ai, and appeared on one security blocklist (PhishDestroy). Registered through MarkMonitor, Inc. on May 8, 2013, it resolved to the IP address 104.18.36.248, hosted by Cloudflare in the US. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title included variations of 'Kräken® Sign In' and 'Loᘜin'. Despite these red flags, Google Safe Browsing did not flag the domain, and Scamadviser assigned it a trust score of 1 out of 100.

Victims of crakenuslogz-14119b.webflow.io should immediately change their Kraken account passwords and enable two-factor authentication (2FA) if they entered credentials on the site. Monitor accounts for unauthorized transactions and report any fraudulent activity to Kraken support. To report the phishing domain, submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). Additionally, notify Cloudflare and Webflow to assist in takedown efforts.