# kraken14---at.net — MALICIOUS

> PhishDestroy warns: kraken14---at.net is a live Kraken-brand impersonation hosting a crypto drainer. 5/95 VirusTotal detections confirm maliciousness.

## Summary
PhishDestroy has identified kraken14---at.net as an active crypto-drainer domain impersonating the legitimate Kraken cryptocurrency exchange. This fraudulent site is engineered to trick visitors into connecting crypto wallets, resulting in automatic token drainage once a wallet signature is approved. Victims risk irreversible financial losses without the possibility of chargebacks.


All technical indicators converge on a high-confidence malicious classification: VirusTotal reports 5 out of 95 participating security vendors flagging the domain, the SSL certificate is issued by Google Trust Services to lend superficial legitimacy, the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on April 04 2025, and the infrastructure resolves to IP address 185.114.96.3. Historical telemetry shows zero benign classifications, placing this site squarely on emerging attack lists.


If you visited kraken14---at.net or entered any credentials, immediately revoke all wallet connections, move remaining assets to a newly generated wallet with a different seed phrase, and run a full antivirus scan. Report the incident to Kraken’s official abuse channels and file a complaint with your local cybercrime unit. Always verify URLs against PhishDestroy’s real-time database before engaging with any Kraken-themed link or advertisement.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Kraken

## Domain Intelligence
- Registered: 2025-04-04 16:38:57
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 5 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b2afd0b7-5f22-40e6-9733-a09f6db8bc56
- PhishDestroy: https://phishdestroy.io/domain/kraken14---at.net/
- LLM endpoint: https://phishdestroy.io/domain/kraken14---at.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kraken14---at.net/
Last updated: 2026-03-27