kr14-at[.]com

The domain kr14-at.com poses a significant phishing threat, designed to trick visitors into divulging personal or financial information under false pretenses. Such sites often mimic legitimate services, using deceptive emails or social media links to lure victims. With a risk level of elevated and an offline status, this domain was actively malicious before being taken down, but users who encountered it may still be at risk of credential theft or malware infection.

PhishDestroy's investigation reveals that kr14-at.com was created on March 28, 2026, and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolved to IP address 95.85.236.107 and appears on one security blocklist. VirusTotal flags this domain as malicious, with 13 out of 95 security vendors confirming its threat. Additionally, it was found in one AlienVault OTX threat intelligence pulse and lacked an SSL certificate, further indicating its untrustworthy nature. These technical indicators collectively confirm the site's role in phishing operations.

If you visited kr14-at.com and entered any personal information, such as usernames, passwords, or financial details, take immediate action. Change passwords for any accounts you may have used on the site, enable two-factor authentication where possible, and monitor your financial accounts for unauthorized activity. Run a full antivirus scan on your devices and consider placing a fraud alert on your credit report. Stay vigilant against follow-up phishing attempts, as cybercriminals often target victims again. For further assistance, consult your organization's security team or a trusted cybersecurity resource.