kr8at[.]cc

PhishDestroy identifies kr8at.cc as an active cryptocurrency drainer posing as a legitimate service to steal digital assets. This domain tricks users into connecting wallets under the guise of fake transactions or fake giveaways, with malicious scripts designed to drain cryptocurrency balances without consent. Visitors risk complete loss of funds if wallet connections are authorized, and compromised wallets may continue to be drained even after leaving the site. This domain was flagged by 5 out of 95 security vendors on VirusTotal, indicating widespread suspicion but not universal detection. kr8at.cc was created on March 10, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known to facilitate both legitimate and high-risk domains. The site uses a Let’s Encrypt SSL certificate and resolves to IP address 172.67.217.173, which has been associated with multiple fraudulent cryptocurrency campaigns, including crypto drainers and fake trading platforms. If you visited kr8at.cc, disconnect your wallet immediately and revoke any unauthorized permissions using blockchain explorers like Etherscan or BscScan. Do not interact further with the site. Report the domain to your antivirus vendor and the platform where the wallet is hosted. Monitor your transaction history for unauthorized transfers and consider transferring remaining assets to a new, secure wallet. Share this warning to help others avoid becoming victims.