# kra-38-at.com — SUSPICIOUS

> PhishDestroy identifies kra-38-at.com as a crypto-draining phishing site with 0/95 VirusTotal detections.

## Summary
PhishDestroy identifies kra-38-at.com as an active crypto-draining phishing domain designed to illicitly transfer cryptocurrency from victims by impersonating legitimate crypto services.

This domain was flagged due to its recently created status on February 08, 2025, registration through NICENIC INTERNATIONAL GROUP CO., LIMITED, and association with a known malicious IP address (188.114.96.3). While its 0/95 VirusTotal detection rate remains low, its SSL certificate issued by Google Trust Services may lend it a deceptive air of legitimacy. The absence of detections should not be misconstrued as safety; crypto drainers often evolve rapidly to evade signature-based detection.

If you have visited kra-38-at.com, cease all cryptocurrency transactions linked to the addresses used on the site. Transfer any remaining assets to a cold wallet immediately. Scan your device with updated antivirus tools, particularly focusing on clipboard hijackers and malware that intercept crypto transactions. Report the domain to your security provider and any crypto platforms it seeks to impersonate. Enable multi-factor authentication on all crypto wallets and avoid clicking links from unsolicited sources.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-02-08 00:25:39
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/11456393-276f-46aa-9297-6497d33e3e32
- PhishDestroy: https://phishdestroy.io/domain/kra-38-at.com/
- LLM endpoint: https://phishdestroy.io/domain/kra-38-at.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kra-38-at.com/
Last updated: 2026-03-27