krakenowlloginn[.]webflow[.]io

This domain, krakenowlloginn.webflow.io, is currently active and classified as a high‑risk credential phishing site. The domain was registered through Webflow, Inc., a legitimate website‑builder service, which does not inherently imply malicious intent but provides a convenient hosting environment for abuse. DNS resolution returns the address 172.64.151.8; the nameserver query returned no records (NS_NOT_FOUND). VirusTotal analysis shows that five of ninety‑one security vendors have flagged the domain as malicious, indicating a modest but notable detection rate.

The domain also appears on three external security blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, further confirming its presence on threat‑sharing platforms. No public SSL certificate details, HTTP status codes, page titles, or brand targeting information have been disclosed, so the specific visual or functional characteristics of the hosted page remain unknown. Defenders should treat any communications referencing this domain as potentially hostile, especially those requesting credential input.

Recommended mitigation steps include adding the domain to internal blocklists, configuring web proxies to deny traffic to the resolved IP, and monitoring DNS logs for queries to the domain. Incident response teams should also consider reporting the domain to additional threat‑intel sharing services to increase its visibility across the community. Ongoing observation is advised, as the infrastructure may evolve or adopt additional techniques.