auth--kraken---cdn--auth[.]webflow[.]io

The domain auth--kraken---cdn--auth.webflow.io is designed to impersonate the legitimate Kraken website, targeting users looking to log into their accounts. With a VirusTotal detection rate of 17 out of 95, this site poses a considerable risk to potential victims. Its misleading page title suggests it is a safe login portal for cryptocurrency trading, which increases the likelihood of credential harvesting.

This phishing domain is registered under an untraceable registrar, and its IP address is 172.64.151.8. It has been flagged by multiple security services, indicating a high level of suspicion. The domain shows signs of malicious intent, including its association with a well-known brand, which adds to the urgency of this threat. Its active status and presence on blocklists highlight the need for continued vigilance.

Currently, the domain is live and operational. PhishDestroy is actively monitoring this phishing site and has initiated reporting measures to mitigate its impact. Ongoing efforts will focus on blocklisting this domain to prevent user exposure and protect against potential data breaches.