kraken6at[.]shop

This domain, kraken6at.shop, is flagged for brand impersonation targeting the Kraken cryptocurrency exchange. Analysis indicates the site presents a fraudulent CAPTCHA page designed to harvest user credentials, likely through a simulated login interface. The domain specifically mimics Kraken’s branding, exploiting trust in the platform to deceive visitors into submitting sensitive account details such as usernames, passwords, and two-factor authentication codes. Such phishing schemes are commonly used to gain unauthorized access to cryptocurrency wallets, leading to financial theft or further exploitation of compromised accounts. Infrastructure analysis reveals the domain was registered on March 28, 2026, through Nicenic International Group Co., Limited, a registrar frequently associated with malicious registrations. It resolves to the IP address 172.67.187.253 and employs Cloudflare services, including Cloudflare Browser Insights and HTTP/3, to obfuscate its true origin and evade detection. Security vendor assessments on VirusTotal show 15 out of 95 engines flagging the domain as malicious, while it appears on one security blocklist. The Gridinsoft trust score for this domain is 0/100, reinforcing its high-risk classification. Users who visited kraken6at.shop should immediately revoke any credentials entered on the site, particularly those linked to Kraken or other cryptocurrency services. It is recommended to enable multi-factor authentication on all financial accounts and monitor for unauthorized transactions. If the domain was accessed via a corporate or managed device, incident response protocols should be initiated, including network traffic analysis to identify potential lateral movement or data exfiltration. The domain is currently offline, but affected users should remain vigilant for follow-up phishing attempts via email or other communication channels.