# stonex-kr.net — SUSPICIOUS

> stonex-kr.net is a crypto drainer impersonating StoneX. Domain created March 29, 2026, flagged by 1 of 95 VirusTotal scanners. Blocked by PhishDestroy.

## Summary
PhishDestroy identifies stonex-kr.net as an active fake-login scam targeting cryptocurrency users. This domain mimics the legitimate StoneX platform to steal wallet credentials and drain funds. Visitors are prompted to enter seed phrases or private keys, leading to irreversible asset loss.  This domain was flagged by 1 out of 95 VirusTotal scanners and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It went live on March 29, 2026, and resolves to IP 185.178.208.140. It is also blocked by PhishDestroy due to elevated phishing risk. The site’s recent creation and low detection rate suggest it is a newly launched, high-conversion threat.  If you visited stonex-kr.net, immediately revoke any connected wallet permissions and transfer remaining assets to a fresh wallet. Use PhishDestroy to verify the domain’s status before interacting with any financial platforms. Do not enter credentials or seed phrases on unfamiliar sites.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-29 06:50:02
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 185.178.208.140

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2fa0f48a-94d0-42eb-8c8f-b92a8d9bfd47
- PhishDestroy: https://phishdestroy.io/domain/stonex-kr.net/
- LLM endpoint: https://phishdestroy.io/domain/stonex-kr.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/stonex-kr.net/
Last updated: 2026-03-31