# krab8cc.net — SUSPICIOUS

> PhishDestroy identifies krab8cc.net as a crypto drainer phishing site impersonating Uniswap. 3 of 95 VirusTotal vendors flagged this domain.

## Summary
PhishDestroy identifies krab8cc.net as an active crypto drainer phishing domain.  krab8cc.net was registered on December 11, 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP 104.21.7.10. This domain was flagged by 3 of 95 VirusTotal security vendors and carries a Google Trust Services SSL certificate, suggesting use of legitimate-looking infrastructure for malicious purposes.  Risk assessment places this domain at an elevated threat level due to active distribution of a crypto drainer impersonating Uniswap. The domain's recent creation date combined with partial detection coverage creates significant danger for cryptocurrency users. Concrete recommendations include immediate blocking of the domain and IP address at network perimeter, user education about verifying URLs before crypto transactions, and reporting to PhishDestroy for enhanced community protection against this active crypto drainer campaign.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-12-11 19:46:15
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 104.21.7.10

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9e6d06ac-b1b9-47d7-9bd4-6b49a0ff97ff
- PhishDestroy: https://phishdestroy.io/domain/krab8cc.net/
- LLM endpoint: https://phishdestroy.io/domain/krab8cc.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/krab8cc.net/
Last updated: 2026-03-27