# kraken-18--at.com — MALICIOUS

> PhishDestroy has flagged kraken-18--at.com as a brand impersonation scam targeting Kraken users. 13/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy assesses kraken-18--at.com as an elevated risk due to its active brand impersonation of Kraken. This domain exhibits characteristics consistent with phishing campaigns aimed at harvesting user credentials or sensitive information by mimicking the legitimate Kraken platform.  

Technical analysis reveals that kraken-18--at.com, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, resolves to IP address 104.21.54.138. The domain was created on April 04, 2025. VirusTotal reports a detection ratio of 13/95, indicating that multiple security vendors have identified this domain as malicious. The presence of an SSL certificate issued by Google Trust Services does not guarantee legitimacy, as phishers frequently utilize such certificates to appear trustworthy.  

Given the domain's clear intent to impersonate Kraken, immediate action is advised. Users should be warned to avoid interacting with kraken-18--at.com or any communications originating from it. Network administrators should block this domain to prevent access from within their networks. Security teams should monitor for related phishing campaigns and proactively educate users about brand impersonation tactics. Report the domain to anti-phishing organizations and search engines to expedite its removal from circulation. Individuals who have interacted with the site should immediately change their Kraken passwords and enable two-factor authentication.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Kraken

## Domain Intelligence
- Registered: 2025-04-04 17:03:58
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.54.138

## Detection Status
- VirusTotal: 13 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/c3240324-0984-4a2c-b679-7c9a16bed151
- PhishDestroy: https://phishdestroy.io/domain/kraken-18--at.com/
- LLM endpoint: https://phishdestroy.io/domain/kraken-18--at.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kraken-18--at.com/
Last updated: 2026-03-28