# krak14.com — SUSPICIOUS > PhishDestroy identifies krak14.com as a Kraken brand impersonation scam. This elevated-risk domain resolved to IP 103.224.212.207 on Nov 20, 2025. ## Summary PhishDestroy confirms krak14.com as an active Kraken brand impersonation scam operating at an elevated risk level. This domain employs deceptive branding to trick users into disclosing login credentials or financial information, mimicking the legitimate cryptocurrency exchange Kraken. This domain was flagged by 1 of 95 VirusTotal security vendors and blocked by OISD. The domain krak14.com was registered through Virtualia LLC on November 20, 2025, and resolves to IP address 103.224.212.207. It appears on 1 security blocklist and holds a Let’s Encrypt SSL certificate, which may lend false credibility to unsuspecting users. These indicators collectively confirm a coordinated impersonation campaign targeting Kraken users. To mitigate exposure, users should avoid visiting krak14.com and verify all URLs before entering sensitive information. Bookmark legitimate Kraken domains and enable multi-factor authentication. Report suspicious domains to Kraken’s abuse team and update browser blocklists with this domain and IP. Organizations should block 103.224.212.207 at the network perimeter and update endpoint defenses to detect similar brand impersonation attempts. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) - Target brand: Kraken ## Domain Intelligence - Registered: 2025-11-20 19:34:16 - Registrar: Virtualia LLC - IP: 103.224.212.207 ## Detection Status - VirusTotal: 1 vendors flagged - Google Safe Browsing: clean - Blocklists: 1 hits Lists: ["OISD"] ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/a250ec6a-c58f-4b46-937e-d9cfa6096316 - PhishDestroy: https://phishdestroy.io/domain/krak14.com/ - LLM endpoint: https://phishdestroy.io/domain/krak14.com/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/krak14.com/ Last updated: 2026-03-28