krrakeionutyusloggin[.]webflow[.]io

This domain, krrakeionutyusloggin.webflow.io, poses a high-risk brand impersonation threat targeting users of a major cryptocurrency exchange platform. The site mimics the legitimate login interface, presenting itself as an official portal for account access and cryptocurrency transactions. Analysis indicates the page title explicitly replicates the targeted brand's identity, increasing the likelihood of successful credential harvesting from unsuspecting victims seeking to manage digital assets or access trading services.

Infrastructure analysis reveals multiple indicators of malicious activity. The domain resolves to the IP address 172.64.151.8, associated with a content delivery network provider, and was registered through a domain registrar on February 21, 2026. Security vendor detection metrics show 18 out of 95 engines flagged the domain as malicious, while it appears on three distinct security blocklists. The SSL certificate, issued by a trusted certificate authority, further complicates detection by presenting a seemingly legitimate encrypted connection, though this does not mitigate the underlying threat.

Users who accessed this domain or entered credentials are advised to take immediate remediation steps. All exposed account credentials should be considered compromised and require urgent password resets through the official platform. Multi-factor authentication should be enabled if not already active, and any connected devices or sessions should be reviewed for unauthorized access. Monitoring for unusual transaction activity or account modifications is strongly recommended, as attackers may attempt to exploit stolen credentials for financial gain or further compromise.