kr-10[.]cc

PhishDestroy identifies kr-10.cc as an active crypto drainer scam, designed to steal cryptocurrency from unsuspecting victims by mimicking legitimate platforms. This domain leverages deceptive tactics, including fake login portals and fraudulent transaction interfaces, to trick users into authorizing unauthorized transfers. The infrastructure behind kr-10.cc is engineered to exploit vulnerabilities in user trust, particularly targeting those seeking quick or high-reward cryptocurrency services.

This domain exhibits multiple red flags confirmed by forensic analysis. Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, kr-10.cc resolves to IP address 188.114.97.3 and was created on April 04, 2025. Security vendor detection stands at 5 out of 95 on VirusTotal, indicating limited but concerning recognition among threat intelligence platforms. The domain holds a Google Trust Services SSL certificate, potentially lulling users into a false sense of security. Additionally, it appears on 1 security blocklist, highlighting its malicious reputation. The combination of a recent creation date, low detection rate, and active scam operations suggests this threat is evolving and may evade some automated defenses.

As of the latest assessment, kr-10.cc remains active and unblocked by default security measures, though it is flagged and blocked by PhishDestroy. Immediate response actions include blocking the domain at the network and endpoint levels, as well as disseminating threat intelligence to security vendors for broader coverage. Despite these efforts, the elevated risk level persists due to the site's active status and the potential for rapid infrastructure changes. Users are strongly advised to verify any interaction with this domain using PhishDestroy and to avoid engaging with suspicious links or platforms promising unrealistic cryptocurrency gains.