# krab153.cc — SUSPICIOUS

> krab153.cc is a crypto drainer phishing domain flagged by 3 of 95 VirusTotal vendors. Avoid this scam site and verify URLs on PhishDestroy.

## Summary
PhishDestroy identifies krab153.cc as an active crypto drainer phishing domain currently in operation. This domain is designed to deceive users into connecting cryptocurrency wallets under false pretenses, enabling unauthorized fund transfers to attacker-controlled addresses. The threat level is classified as elevated due to its active status and confirmed malicious infrastructure.  This domain was flagged by 3 of 95 VirusTotal security vendors, indicating partial but not universal detection. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 172.67.221.179. The domain was created on December 12, 2025, and currently holds an SSL certificate issued by Google Trust Services, which may contribute to user trust despite its malicious intent. The combination of recent creation and low blocklist coverage suggests an emerging threat with potential for rapid expansion.  Given its active status and low detection rate, users are strongly advised to avoid interacting with krab153.cc under any circumstances. PhishDestroy recommends verifying all URLs through its platform before clicking. Block this domain at the network level and report any observed activity to enhance collective defense. Educational outreach to cryptocurrency users about wallet connection risks is strongly encouraged to prevent potential financial losses.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-12-12 05:10:18
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 172.67.221.179

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/60ce2490-d5b6-40bc-af53-e031c0cf15f6
- PhishDestroy: https://phishdestroy.io/domain/krab153.cc/
- LLM endpoint: https://phishdestroy.io/domain/krab153.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/krab153.cc/
Last updated: 2026-03-26