# kraken30-at.com — MALICIOUS

> Beware the crypto drainer kraken30-at.com, impersonating Kraken since June 27. 5 of 95 VirusTotal vendors flagged this malicious domain.

## Summary
PhishDestroy identifies the active crypto drainer domain kraken30-at.com, which impersonates the cryptocurrency exchange Kraken. This domain, registered on June 27, 2024, is currently engaged in brand impersonation with elevated risk to users. The threat involves a fake login page designed to steal cryptocurrency wallet credentials and facilitate unauthorized fund transfers.


This domain was flagged by 5 of 95 VirusTotal vendors, indicating partial detection by security tools. It resolves to IP address 185.226.92.168 and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain's recent creation date and low trust scores, combined with its use of a Let's Encrypt SSL certificate, suggest an attempt to appear legitimate while evading detection. Additional blocklist data and trust metrics further confirm its malicious nature.


Users are strongly advised to avoid interacting with kraken30-at.com and verify any Kraken-related URLs using PhishDestroy’s real-time threat database. Organizations should update firewall rules and DNS blocklists to include this domain and its associated IP address. Immediate reporting of this domain to cybersecurity teams and cryptocurrency platforms can help mitigate further attacks. Stay vigilant and always cross-check URLs before entering sensitive information.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Kraken

## Domain Intelligence
- Registered: 2024-06-27 11:52:38
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 185.226.92.168

## Detection Status
- VirusTotal: 5 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2cfcd2e2-ee29-41e2-8887-2d4c8d46d4ed
- PhishDestroy: https://phishdestroy.io/domain/kraken30-at.com/
- LLM endpoint: https://phishdestroy.io/domain/kraken30-at.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kraken30-at.com/
Last updated: 2026-03-27