kra46-at[.]cc

The domain kra46-at.cc has been identified as a malicious crypto drainer site, designed to impersonate the legitimate Krab6 cryptocurrency exchange. This threat specifically targets users seeking to access their exchange accounts, tricking them into entering sensitive credentials or approving malicious transactions that drain their digital wallets. The site's title, "krab6.at — официальный доступ | Система доменов krab6," is a clear attempt to deceive visitors into believing they are on the official platform.

Evidence against this domain is substantial. VirusTotal analysis reveals that 7 out of 95 security vendors flag it as malicious, indicating broad industry recognition of the threat. The domain was registered on April 25, 2025, through NiceNIC International Group Co., Limited, a registrar often abused for such schemes. It appears on 1 security blocklist and has already been taken offline, but its short lifespan underscores the rapid deployment typical of crypto drainer operations. The SSL certificate from Google Trust Services does not indicate legitimacy, as even fraudulent sites can obtain certificates.

Users who have visited kra46-at.cc should immediately change passwords for any accounts entered on the site, enable two-factor authentication, and monitor their cryptocurrency wallets for unauthorized transactions. It is crucial to never reuse passwords across platforms and to report any losses to relevant authorities. PhishDestroy continues to track this threat and advises all users to verify domain authenticity through official channels before interacting with any exchange or financial service.