krakn46at[.]cc

PhishDestroy identifies krakn46at.cc as a cryptocurrency drainer domain impersonating wallet services to siphon funds. This domain leverages deceptive tactics to trick users into connecting their wallets and authorizing malicious transactions. The drainer kit is designed to exploit wallet approval prompts, leading to unauthorized asset transfers under the guise of legitimate transactions.

This domain was flagged with a VirusTotal detection score of 1/95 security vendors, indicating limited but confirmed malicious activity. It was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 185.226.92.168. The domain was created on November 19, 2025, and currently holds a Let's Encrypt SSL certificate. It appears on 1 security blocklist and is blocked by MetaMask, highlighting its malicious nature. The domain's recent creation and low detection rate suggest it may be part of a rapidly evolving campaign targeting cryptocurrency users.

As of the latest assessment, krakn46at.cc remains active with an elevated risk level. Immediate actions include blocking the domain and IP address to prevent further access. Users are advised to avoid interacting with this domain and verify any suspicious links using PhishDestroy's threat intelligence tools. While current countermeasures are effective, the domain's low detection rate and recent emergence pose a lingering risk to unwary users. Regular monitoring and updates to security tools are recommended to mitigate potential threats.