kra17att[.]cc

PhishDestroy identifies kra17att.cc as an active crypto drainer domain designed to steal cryptocurrency from unsuspecting users. This fraudulent site impersonates legitimate crypto platforms to trick victims into connecting their wallets and approving fraudulent transactions. Once connected, the drainer silently transfers funds to attacker-controlled wallets without requiring additional approvals, making it a high-risk threat to digital assets. This domain was flagged by 12 out of 95 security vendors on VirusTotal, indicating widespread recognition of its malicious intent. kra17att.cc was created on January 19, 2026, and is registered through Gname 185 Inc, a registrar often associated with high-risk domains. The site uses a Let's Encrypt SSL certificate to appear legitimate and resolves to IP address 45.130.151.196, which hosts multiple suspicious domains. If you visited kra17att.cc or entered any information, disconnect your wallet immediately and revoke any suspicious permissions through your wallet’s settings. Do not interact further with this domain. Use PhishDestroy to verify any suspicious links before clicking or entering credentials. Report this domain to your wallet provider and local cybercrime units to help prevent further attacks.