# zk0011.com — SUSPICIOUS > PhishDestroy identifies zk0011.com as a live drainer kit phishing domain resolving to 13.226.244.7. Avoid wallet-draining scams and report this active threat. ## Summary PhishDestroy identifies zk0011.com as a generic phishing domain hosting a drainer kit aimed at illicit cryptocurrency transfers. The domain does not impersonate a specific brand and leverages a kit designed to drain victim wallets upon interaction. Currently, the campaign is active and under real-time monitoring with unique seed identifier 8106c9. This domain was flagged with a VirusTotal score of 0/95 detections, registered on July 22, 2025 through GoDaddy.com, LLC, and resolves to IP address 13.226.244.7. It utilizes an Amazon-issued SSL certificate to appear legitimate and has not yet been flagged by Google Safe Browsing. No public blocklist entries have been recorded to date. The campaign remains active with no confirmed takedowns. Users are advised to block zk0011.com at the network and endpoint levels and avoid any connection attempts. Remaining risk includes ongoing drainer deployments targeting web3 users. Immediate reporting to threat intelligence platforms is recommended to expedite containment. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registered: 2025-07-22 11:12:34 - Registrar: GoDaddy.com, LLC - IP: 13.226.244.7 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/78b753e8-9e29-49a3-9c73-d6a4f3dd6a50 - PhishDestroy: https://phishdestroy.io/domain/zk0011.com/ - LLM endpoint: https://phishdestroy.io/domain/zk0011.com/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/zk0011.com/ Last updated: 2026-03-24