# tkrn.cc — MALICIOUS

> tkrn.cc is a crypto drainer impersonating trading platforms, with 15/95 VirusTotal detections. Created Jan 2025 via NICENIC. Never enter wallet details here.

## Summary
PhishDestroy identifies tkrn.cc as a cryptocurrency drainer website operating under the guise of a legitimate trading platform. This malicious domain (tkrn.cc) is designed to trick users into connecting their digital wallets under the false promise of cryptocurrency trading or investment opportunities. Unsuspecting victims who interact with the site may authorize cryptocurrency transfers to attacker-controlled wallets, resulting in irreversible financial losses. The domain leverages a professional aesthetic and fabricated trading interface to appear credible, while its backend likely executes unauthorized blockchain transactions once wallet connections are established.  tkrn.cc was registered on January 21, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for hosting both legitimate and high-risk domains. Intelligence indicates that as of the latest VirusTotal scan, 15 out of 95 security vendors flagged tkrn.cc as malicious, reflecting a high level of suspicion within the cybersecurity community. The site operates under an SSL certificate issued by Google Trust Services, which may further deceive users into believing the platform is secure. Its recent creation and low detection rate combine to form an elevated risk profile, especially for users enticed by premature “get rich quick” promises in the crypto space.  If you visited tkrn.cc, do not connect any cryptocurrency wallet or provide any personal or financial information. Immediately close your browser and clear relevant site data. Use a reputable antivirus tool to scan your device for any malicious extensions or software. Report the domain to your wallet provider and consider transferring remaining assets to a new, secure wallet if you suspect unauthorized access. Monitor your transaction history closely for any unfamiliar outflows. Never reuse or “revoke” wallet connections on untrusted sites—always use official links or verified platforms such as the project’s legitimate website or app stores.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-01-21 18:01:03
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 15 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9bb12aa5-d608-474b-b180-d9b59a677083
- PhishDestroy: https://phishdestroy.io/domain/tkrn.cc/
- LLM endpoint: https://phishdestroy.io/domain/tkrn.cc/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/tkrn.cc/
Last updated: 2026-03-28