kc-eth[.]top

This domain is flagged as a high-risk brand impersonation threat specifically designed to mimic WalletConnect, a legitimate cryptocurrency wallet connection service. Analysis indicates the site operates as a crypto drainer, tricking users into authorizing malicious transactions that siphon digital assets from connected wallets. The domain presents an immediate risk to individuals interacting with decentralized finance platforms or managing crypto assets. Infrastructure analysis reveals multiple technical indicators supporting this assessment. The domain kc-eth.top resolves to IP address 188.114.97.3 and was registered on February 21, 2026, through Gname.com Pte. Ltd. Security vendors on VirusTotal flagged the domain at a 10/95 detection ratio, while Gridinsoft assigned a trust score of 0/100. The site appears on two security blocklists and is actively blocked by PhishDestroy and InversionDNS. Google Safe Browsing classifies the domain under SOCIAL_ENGINEERING, and detected technologies include Cloudflare, Cloudflare Browser Insights, and HTTP/3. The page title KCETH further suggests an attempt to impersonate legitimate crypto services. Users who may have interacted with this domain should immediately revoke any wallet authorizations granted to unknown or suspicious sites via their wallet provider's interface. Monitor transaction histories for unauthorized transfers and consider transferring remaining assets to a new wallet if compromise is suspected. Wallet software should be updated to the latest version, and browser extensions or applications used during the interaction should be scanned for malware. Security teams should add the domain, IP address 188.114.97.3, and associated indicators to network blocklists to prevent further access. Organizations managing crypto infrastructure should implement strict allowlisting for wallet connection domains and educate users on verifying legitimate service URLs.