# kraken-14--at.net — MALICIOUS

> kraken-14--at.net impersonates Kraken crypto exchange with 6/95 detection on VirusTotal. Users should avoid this site and verify URLs before engagement.

## Summary
PhishDestroy identifies kraken-14--at.net as an active brand impersonation scam targeting Kraken cryptocurrency exchange users. The domain leverages visual and textual deception to trick victims into divulging credentials or payment details under the guise of a legitimate platform.  
kraken-14--at.net presents an elevated risk due to its confirmed impersonation of Kraken and partial detection coverage across security vendors. VirusTotal reveals 6 out of 95 security engines flagged the domain as malicious as of the latest analysis. The domain was registered on April 04, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with bulk and privacy-protected registrations that can obscure malicious ownership. It resolves to IP address 188.114.97.3, a hosting infrastructure linked to multiple low-trust activities. Despite hosting suspect content, the domain holds an SSL certificate issued by Google Trust Services, which alone cannot validate legitimacy. The combination of recent creation date, registrar profile, and low detection rate underscores its potential to evade early detection while posing immediate risk to uninformed users.  
This threat type—brand impersonation—relies on exploiting user trust in well-known brands. To mitigate exposure, organizations and users should: block kraken-14--at.net at DNS and network levels using threat intelligence feeds; educate users to verify domain spelling, HTTPS indicators, and official Kraken domains (e.g., kraken.com); and deploy browser-based warnings using real-time threat feeds. Immediate isolation or takedown requests should be escalated to hosting providers and registrars referencing the domain, registration date, and resolving IP. Given the active status and low detection rate, proactive blocking is essential to prevent credential harvesting or malware delivery under the Kraken brand.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Kraken

## Domain Intelligence
- Registered: 2025-04-04 16:31:57
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 6 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/1691d986-8205-4f9b-a3af-c46a598debee
- PhishDestroy: https://phishdestroy.io/domain/kraken-14--at.net/
- LLM endpoint: https://phishdestroy.io/domain/kraken-14--at.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kraken-14--at.net/
Last updated: 2026-03-27