# krakex3.vip — SUSPICIOUS

> krakex3.vip is a live fake login page tricking users into connecting crypto drainers. Flagged by 3/95 VirusTotal scanners, registered August 17, 2025.

## Summary
krakex3.vip is an active crypto-draining phishing domain that poses an elevated risk to cryptocurrency users. PhishDestroy analysis reveals it impersonates a login portal designed to steal wallet credentials and authorize unauthorized token transfers. Visitors who connect wallets risk drained assets without additional confirmation prompts, a common trait of modern drainer scripts embedded in the page. The site is not a legitimate exchange endpoint and should be treated as hostile infrastructure targeting crypto holders.  This domain was flagged by 3 out of 95 VirusTotal security vendors within 24 hours of creation. Domain records show it was registered on August 17, 2025, through Gname.com Pte. Ltd., and resolves to IP address 212.227.240.4. The site holds a valid Let's Encrypt SSL certificate, which is frequently abused in phishing campaigns to appear trustworthy. The short domain age combined with low initial detection rates suggests this is a newly deployed threat actively harvesting credentials from unsuspecting users.  If you visited krakex3.vip, immediately disconnect your wallet from the site using your wallet’s “disconnect” function. Do not approve any transactions or enter seed phrases. Scan your device with updated antivirus software and consider rotating wallet addresses and private keys if you entered any information. Report the link to PhishDestroy for community blocking and monitor your transaction history for unauthorized transfers.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-08-17 19:50:08
- Registrar: Gname.com Pte. Ltd.
- IP: 212.227.240.4

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/8a33075b-0e6f-4242-a1fc-00609503ca58
- PhishDestroy: https://phishdestroy.io/domain/krakex3.vip/
- LLM endpoint: https://phishdestroy.io/domain/krakex3.vip/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/krakex3.vip/
Last updated: 2026-03-30