cr7coin[.]lat

The domain cr7coin.lat is a generic phishing site designed to deceive users into disclosing sensitive information or performing unauthorized actions. It does not impersonate a specific brand and is not associated with a known crypto drainer kit. As of the latest verification, cr7coin.lat has been taken offline, but it previously posed an elevated risk of credential theft or other fraudulent activity.

Technical indicators confirm the suspicious nature of cr7coin.lat. The domain was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned it a trust score of 0 out of 100. It appears on one security blocklist, PhishDestroy, and was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on August 26, 2025. The site resolved to the IP address 104.21.80.1, hosted by Cloudflare in the US, and used an SSL certificate issued by WE1. The observed page title was 'Just a moment...', a common placeholder for malicious or misconfigured sites.

Users who may have interacted with cr7coin.lat should take immediate safety steps. If login credentials were entered, change passwords for all affected accounts and enable two-factor authentication. Monitor accounts for unauthorized activity and report any suspected fraud to financial institutions. To report the domain, submit it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities. Victims of phishing scams can also file complaints with organizations such as the FBI’s Internet Crime Complaint Center (IC3) or their national cybercrime reporting agency.