xn--krakn-m0a[.]cc
“Kraken Audio — Премиальные наушники”
xn--krakn-m0a.cc — 隐形 · 可达 (HTTP 502). 品牌冒充:Kraken; 诈骗类型:Brand Impersonation. 证据摘要: VirusTotal 11/94 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 2 alerts; Spamhaus DBL_PHISH; cloaking observed; PhishDestroy score 88/100. 注册商: NiceNIC.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain is a confirmed brand impersonation site designed to deceive users into believing it represents Kraken, a well-known cryptocurrency exchange. The site displays the title 'Kraken Audio — Премиальные наушники,' falsely presenting itself as a premium audio product retailer. However, its primary function is to harvest sensitive information, such as login credentials or financial details, from unsuspecting visitors under the guise of a legitimate business. Analysis indicates the domain was registered on March 29, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 104.21.83.133 and uses a Let's Encrypt SSL certificate (E7). Security vendors on VirusTotal have flagged the domain as malicious, with 11 out of 95 engines detecting it as a threat. Additionally, the domain appears on one security blocklist, further confirming its malicious nature. If you visited xn--krakn-m0a.cc, immediately disconnect the device from the network to prevent potential data exfiltration. Clear all browser caches, cookies, and saved credentials, as these may have been compromised. Run a full antivirus scan to detect and remove any malware that may have been downloaded. Monitor financial accounts and cryptocurrency wallets for unauthorized transactions, and consider enabling multi-factor authentication on all critical accounts. Report the incident to your organization’s security team or a trusted cybersecurity professional for further investigation.
网络安全情报 Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | xn--krakn-m0a.cc |
malicious | Sinkholed |
| DNS4EU | xn--krakn-m0a.cc |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
Latest Classified Outcome 2026-08-19 03:35:33 UTC
所用技术 · 5 identified
JavaScript runtime built on Chrome V8 engine for server-side development.
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of xn--krakn-m0a.cc · checked Mar 29, 2026
证据与外部报告
PD-20260328-583582 Recipient: abuse@nicenic.net, abuse@verisign-grs.com, compliance@icann.org 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。