klakna[.]yibvebquqv[.]yoga

The domain klakna.yibvebquqv.yoga has been identified as a phishing site specifically impersonating Klarna, a widely used payment service provider. Analysis indicates this domain is designed to harvest user credentials under the pretense of legitimate payment processing. As of the latest assessment, the domain has been taken offline, though prior activity suggests it was actively targeting users through deceptive payment prompts. Infrastructure analysis reveals the domain was registered on March 02, 2026, through NameSilo, LLC, and resolves to the IP address 172.67.202.49. It is flagged by 11 of 95 security vendors on VirusTotal, with additional detections on two security blocklists. The domain employs technologies including Vue.js, Cloudflare, and HTTP/3, which may have been leveraged to obfuscate malicious intent. The Gridinsoft trust score for this domain is 0 out of 100, reinforcing its classification as a high-risk entity. The page title, 'Klakna,' is a deliberate misspelling of the legitimate brand, a common tactic to evade detection while maintaining visual similarity. Current status indicates the domain is offline, though the infrastructure remains a potential vector for future malicious activity. Organizations and users are advised to block the domain and its associated IP address (172.67.202.49) at the network level. Security teams should monitor for similar domains registered through NameSilo or utilizing Cloudflare-based hosting, particularly those with misspelled brand names. End-users should be educated to verify payment portals directly through official channels and avoid interacting with unsolicited payment requests, even if they appear to originate from trusted brands.