kraken6-at[.]monster

This domain, kraken6-at.monster, is identified as a credential harvesting site targeting users of the Kraken cryptocurrency exchange. Analysis indicates the site mimics legitimate Kraken login interfaces to deceive visitors into entering sensitive account information, including usernames, passwords, and potentially two-factor authentication codes. Such attacks enable unauthorized access to digital asset wallets, leading to financial theft and account compromise. Infrastructure analysis reveals the domain was registered on March 29, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. Detection metrics show the domain is flagged by 8 out of 95 security vendors on VirusTotal, confirming its malicious classification. Additionally, it appears on one security blocklist and was actively blocked by real-time threat intelligence systems prior to being taken offline. Users who visited kraken6-at.monster should immediately revoke any entered credentials through Kraken’s official account recovery process. Enable multi-factor authentication on all cryptocurrency accounts and monitor for unauthorized transactions. If financial loss is suspected, report the incident to relevant cybercrime authorities and Kraken’s security team. Avoid interacting with any communications claiming to be from Kraken that reference this domain, as they may be part of follow-up phishing attempts.