loginkrakenn[.]webflow[.]io

This domain, loginkrakenn.webflow.io, poses a significant threat by impersonating Kraken, a well-known cryptocurrency exchange platform. The site mimics Kraken’s official login page, tricking users into entering their credentials, which attackers then harvest for unauthorized access to accounts, financial theft, or further exploitation. The page title explicitly reads 'Kraken Login : Bitcoin & Cryptocurrency Exchange,' reinforcing the illusion of legitimacy to deceive victims. Analysis indicates the domain is flagged by 18 out of 95 security vendors on VirusTotal, confirming its malicious nature. It was registered through Webflow, a legitimate web development platform often abused for hosting phishing infrastructure. The site resolves to the IP address 172.64.151.8 and employs technologies such as Cloudflare, Google Analytics, and HTTP/3, which are commonly used to obfuscate malicious activity. Google Safe Browsing has classified this domain under 'SOCIAL_ENGINEERING,' and it appears on three security blocklists, including those maintained by MetaMask and PhishDestroy. If you visited loginkrakenn.webflow.io or entered any credentials, take immediate action. First, disconnect the device from the internet to prevent further data transmission. Change the passwords for your Kraken account and any other platforms where the same credentials may have been reused. Enable multi-factor authentication (MFA) on all accounts to add an extra layer of security. Monitor your accounts for unauthorized transactions and report any suspicious activity to Kraken’s official support channels. Consider running a full security scan on your device to detect and remove any potential malware.