# kraken13-at.net — MALICIOUS

> PhishDestroy identifies kraken13-at.net as a Kraken brand impersonation scam resolving to 188.114.96.3. 17/95 security vendors flag this active threat.

## Summary
PhishDestroy identifies kraken13-at.net as an active Kraken brand impersonation scam with elevated risk. This domain specifically mimics the legitimate cryptocurrency exchange Kraken to deceive users into disclosing account credentials or financial data.

This domain was flagged by 17 out of 95 VirusTotal security vendors, indicating substantial malicious intent. It resolves to IP address 188.114.96.3 and leverages a Google Trust Services SSL certificate to appear legitimate. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 04, 2025, the domain shows clear signs of recent malicious setup. The combination of high VirusTotal detection rate and impersonation tactics places users at significant risk of credential theft or financial fraud.

Users should immediately avoid interacting with kraken13-at.net and report the domain to their IT security teams or relevant authorities. Organizations are advised to block traffic to 188.114.96.3 at the network perimeter and update blocklists to prevent access. Since the domain uses a valid SSL certificate, users cannot rely on HTTPS indicators; vigilance and verification against official Kraken domains are critical. Always access Kraken services through verified channels and enable multi-factor authentication to mitigate impersonation risks.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Kraken

## Domain Intelligence
- Registered: 2025-04-04 16:48:13
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 17 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/0b9dc907-8abe-4f66-81b9-487939d3127b
- PhishDestroy: https://phishdestroy.io/domain/kraken13-at.net/
- LLM endpoint: https://phishdestroy.io/domain/kraken13-at.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kraken13-at.net/
Last updated: 2026-03-28