frankencoin[.]win

frankencoin.win masquerades as a decentralized application (dApp) offering crypto collateral services. Despite its offline status, it represents a sophisticated phishing attempt targeting cryptocurrency users. The page title suggests a service to borrow ZCHF against crypto collateral, which is a common lure for unsuspecting users in the crypto space.

Registered through Porkbun and hosted on an IP associated with CloudFlare in Canada, the domain is part of a broader trend of phishing sites leveraging reputable hosting services to gain legitimacy. The SSL certificate issued by Google Trust Services adds another layer of perceived trustworthiness, making it a potentially effective trap for victims.

Although frankencoin.win is currently offline, it was detected in the early stages of its lifecycle, with zero VirusTotal detections. This highlights the domain's freshness and the gap between its registration and the propagation of its malicious nature through antivirus databases. PhishDestroy's proactive detection pipeline captures such threats during this critical window, ensuring timely alerts and mitigation efforts.

The domain is listed on one public blocklist, specifically PhishDestroy's, indicating its confirmed malicious intent. This early identification and listing are crucial in preventing potential financial losses and data breaches. As phishing tactics evolve, the need for advanced detection methods becomes increasingly important to safeguard users against emerging threats.