kra-34cc[.]com

PhishDestroy identifies kra-34cc.com as a live crypto drainer phishing domain designed to trick users into authorizing malicious cryptocurrency transfers. The domain mimics legitimate crypto-related services to deceive visitors into connecting wallets or entering credentials, which are then exploited by attackers to drain assets or harvest sensitive data. Security telemetry shows this infrastructure has already ensnared users, with confirmed phishing payloads observed in the wild targeting cryptocurrency holders. This domain was flagged by PhishDestroy after exhibiting multiple red flags: VirusTotal analysis reveals 2 out of 95 security vendors detect it as malicious; it was registered via NICENIC INTERNATIONAL GROUP CO., LIMITED on February 08, 2025; and it resolves to IP 188.114.96.3. Despite hosting a Google Trust Services SSL certificate, the domain’s recent creation and low detection rate suggest an actively evolving threat that evades traditional defenses. The 2/95 VirusTotal score, while low, indicates partial coverage by security tools, leaving many users vulnerable to exposure. If you accessed kra-34cc.com or entered any information, immediately revoke any connected wallet permissions through your wallet provider’s interface and transfer remaining assets to a clean wallet. Scan your device with reputable antivirus software and clear browser cache/cookies. Report the domain to your security team or PhishDestroy to help block further propagation. Monitor financial accounts and crypto wallets for unauthorized transactions. Never reuse passwords across platforms and enable two-factor authentication where possible. Stay alert to domain spoofing and verify URLs through official channels before engagement.