kra-34at[.]com

PhishDestroy identifies kra-34at.com as an active cryptocurrency drainer posing an elevated risk to internet users. The domain mimics legitimate crypto platforms to trick victims into connecting wallets or entering seed phrases, enabling direct fund theft. Active since February 7, 2025, this site leverages trust-building SSL (Google Trust Services) to appear authentic while operating under a 5/95 VirusTotal detection score. This domain was flagged by 5 of 95 security engines on VirusTotal, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP 104.21.54.224. With a creation date of February 07, 2025, the short domain age increases suspicion as threat actors frequently deploy new domains to evade blocklists. Google Trust Services issued its SSL certificate, which may temporarily lower user vigilance despite the domain's malicious purpose. To mitigate risk from crypto drainers like kra-34at.com, avoid clicking links or visiting the domain entirely. Never connect crypto wallets or enter seed phrases on untrusted sites. Use hardware wallets and blockchain monitoring tools to track suspicious transactions. Report this domain to your antivirus vendor and crypto platform support immediately using its full URI.