kraen-loin[.]webflow[.]io

As of July 23, 2026, the domain kraen-loin.webflow.io has been identified as a confirmed crypto scam impersonating the well-known cryptocurrency exchange, Kraken. Analysis indicates that the domain was created on May 08, 2013, and was registered through MarkMonitor, Inc. The site's page title, 'Kraken® Login - Log_In to My - Account (official Website)', suggests an attempt to deceive users into believing they are accessing the legitimate Kraken login page. The domain is currently offline, returning an HTTP 404 status, and has been flagged by Google Safe Browsing for social engineering.

It is also listed on one security blocklist and blocked by PhishDestroy. Infrastructure analysis reveals that the domain resolves to the IP address 104.18.36.248, which is located in the United States and is part of the AS13335 Cloudflare, Inc. network. The SSL certificate is issued by Google Trust Services, indicating a potential use of a trusted certificate to enhance the credibility of the phishing site.

Despite the offline status, the domain has been flagged by 15 out of 95 security vendors on VirusTotal, suggesting a high risk level. Defenders should remain vigilant and ensure that this domain is blocked in their network security configurations to prevent any potential access by unsuspecting users. The exact content of the page has not been analyzed, but the page title and the domain's current status indicate a deliberate attempt to impersonate Kraken and potentially steal user credentials or cryptocurrency.