krakenexchaenge[.]webflow[.]io

This domain is flagged as a confirmed brand-impersonation phishing endpoint targeting Kraken, a major cryptocurrency exchange platform. Analysis indicates the site employs deceptive content, including a fabricated page titled 'Kraken Exchange vs. Competitors: Why Kraken Reigns Supreme,' designed to manipulate users into divulging sensitive account credentials or financial information under the guise of legitimate comparison material. Infrastructure analysis reveals the following technical indicators: the domain krakenexchaenge.webflow.io resolves to IP address 104.18.36.248, hosted on Cloudflare’s network (AS13335) in the United States. The domain was originally registered on May 8, 2013, through MarkMonitor, Inc., though the current malicious subdomain appears to have been recently repurposed. Security vendor detection on VirusTotal stands at 14 out of 95 engines, with one active blocklist entry. The SSL certificate is issued by Google Trust Services (WE1), providing a superficial layer of legitimacy. Despite its historical registration date, the domain’s current configuration and content align with active phishing campaigns. Mitigation measures should focus on brand-impersonation threats within the cryptocurrency sector. Network administrators are advised to block traffic to 104.18.36.248 and monitor for related subdomains under webflow.io or other content delivery platforms. End-users should verify domain authenticity by cross-referencing official exchange URLs and enabling multi-factor authentication on all financial accounts. Security teams are encouraged to update detection rules to include the page title and IP address as indicators of compromise in phishing alert systems.