krakcn[.]net

krakcn.net, a fraudulent domain impersonating the Kraken exchange, has been taken offline. Despite this, it has been flagged as malicious by 8 out of 95 vendors on VirusTotal. The domain was hosted on an IP address in Canada, under Cloudflare's infrastructure, and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED.

This domain aimed to deceive users by masquerading as the legitimate Kraken exchange, a well-known cryptocurrency platform. By doing so, it likely attempted to harvest sensitive user information such as login credentials and financial data. The use of Let's Encrypt for SSL certification suggests an effort to appear legitimate and secure to potential victims.

PhishDestroy has included krakcn.net in its public blocklist, indicating the domain's recognition as a threat. The presence of this domain in only one public blocklist might suggest that it was relatively new or short-lived, which is typical for phishing domains that exploit the time gap between registration and detection by antivirus databases. This highlights the importance of early detection systems to mitigate such threats before they can cause significant harm.