kraken6-at[.]com

This domain, kraken6-at.com, was taken offline as of the report date 25 July 2026. The site was registered on 24 February 2026 through NiceNIC International Group Co., Limited and resolves to the Cloudflare‑owned address 188.114.96.3 (AS13335, United States). DNS resolution uses the Cloudflare authoritative nameservers aaden.ns.cloudflare.com and elinore.ns.cloudflare.com, and the service presented an SSL certificate issued by Google Trust Services under the WE1 intermediate, indicating a valid HTTPS endpoint. The web server advertised support for HTTP/3, confirming the presence of modern transport protocols.

Brand impersonation was identified: the page title “KRAKEN6.at” and the listed target “Kraken” indicate a crypto‑related scam attempting to lure users of the Kraken exchange. The domain appears on a single security blocklist and was blocked by the PhishDestroy service. VirusTotal analysis recorded six detections out of ninety‑three scanners, reflecting a modest but non‑trivial detection rate. Gridinsoft assigned a trust score of 0 out of 100, reinforcing the malicious classification.

Evidence does not include any content‑level inspection; the site’s visual layout, form fields, or credential capture mechanisms have not been publicly disclosed. Consequently, the precise phishing kit or lure technique remains unknown. Defenders should continue to block the domain and its associated IP address at perimeter filters, update local blocklists with the observed identifiers, and monitor for any re‑use of the Cloudflare IP range in future campaigns. Ongoing surveillance of the registrar NiceNIC and the Cloudflare infrastructure is recommended, as adversaries frequently recycle these services for new impersonation campaigns.