akhr[.]pro

The domain akhr.pro is a generic phishing site targeting cryptocurrency users. It poses an elevated risk by attempting to deceive visitors into disclosing sensitive information or transferring digital assets under false pretenses. No legitimate brand is impersonated, and no drainer kit was identified. As of the latest verification, akhr.pro has been taken offline.

Technical indicators confirm the malicious nature of akhr.pro. The domain was flagged by 1 of 95 security vendors on VirusTotal, including SOCRadar, and appears on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. It was created on 2026-02-21 and resolves to the IP address 172.67.151.196, hosted on Cloudflare's infrastructure (AS13335) in the US. The SSL certificate is issued by WE1, and the observed page title, 'Ankr | The Fastest Web3 Infrastructure,' suggests an attempt to mimic web3 services. Nameservers are frida.ns.cloudflare.com and piers.ns.cloudflare.com. Technologies detected include Node.js, Express, HSTS, Cloudflare, and HTTP/3.

Users who interacted with akhr.pro should assume their credentials or wallet details may be compromised. For cryptocurrency-related exposure, revoke all token approvals, transfer remaining funds to a new wallet, and monitor transaction history for unauthorized activity. If login credentials were entered, change passwords immediately and enable two-factor authentication on all affected accounts. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in takedown efforts and protect others from similar phishing attempts.