alpha[.]skr[.]fun

PhishDestroy identifies alpha.skr.fun as an active crypto drainer phishing domain posing elevated risk to cryptocurrency users. This site masquerades as a legitimate platform to trick visitors into connecting wallets and authorizing malicious token transfers that drain funds without consent. The threat is classified as a crypto drainer due to its behavior of exploiting wallet approvals and transaction signatures to steal assets directly from connected blockchain accounts.

This domain was flagged by 4 of 95 VirusTotal security vendors and resolves to IP 64.29.17.65. It was registered through GoDaddy.com, LLC on September 14, 2025, and currently holds a Let’s Encrypt SSL certificate. The domain’s recent creation and low detection rate indicate it is a newly launched threat actor resource actively evading blocklists. Trust indicators such as domain age, registrar choice, and certificate issuer do not mitigate the elevated risk posed by its operational intent.

To mitigate exposure to this crypto drainer, users must never connect wallets or sign transactions on untrusted domains. Always verify site URLs, inspect certificate details, and cross-check against reputable threat intelligence feeds. Use hardware wallets with limited spending approvals for additional protection. Report the domain to security platforms and block it at the network level to prevent further access.