kra34g[.]cc

Kra34g.cc is a crypto drainer domain that was designed to steal cryptocurrency from unsuspecting users. This domain is currently offline, but during its active period it posed a significant threat to anyone who visited it. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, and it resolves to the IP address 104.21.65.63. According to VirusTotal, 8 out of 95 security vendors flagged this domain as malicious, indicating a notable level of consensus on its dangerous nature. Additionally, AlienVault OTX includes it in one threat intelligence pulse, and it appears on one security blocklist. The domain was created on March 29, 2026, which is relatively recent, suggesting it was part of a targeted campaign.

Based on the available intelligence, kra34g.cc was designed to function as a crypto drainer, meaning it likely attempted to trick users into connecting their cryptocurrency wallets to the site, thereby allowing the attackers to drain their funds. The fact that it was taken offline suggests that security researchers or authorities intervened, but similar domains may still be active. Users who may have visited the site should immediately revoke any permissions granted to the domain and monitor their cryptocurrency wallets for unauthorized transactions. It is also advisable to run a security scan on any devices that were used to access the site.

To stay safe, always verify the authenticity of websites before interacting with them, especially when cryptocurrency transactions are involved. PhishDestroy recommends using browser extensions that block known malicious domains and keeping security software up to date. If you encounter a domain similar to kra34g.cc, report it to threat intelligence platforms to help protect others.