crest-cridetunion[.]com

Analysis of crest-cridetunion.com confirms active brand impersonation targeting the 'across' brand, classified as a crypto scam. The domain was registered on June 9, 2025, through Dynadot LLC and currently resolves to 198.12.80.250 (AS36352, HostPapa, US). The site returns an HTTP 200 status, indicating operational hosting, and uses a Let's Encrypt SSL certificate (R12). Infrastructure review shows a single nameserver and MX records pointing to the domain itself, a common tactic to facilitate credential harvesting or transactional fraud. Security vendor detections include 13 flags on VirusTotal, with one blocklist (PhishDestroy) already enforcing restrictions. The domain's trust scores are critically low (Gridinsoft: 0/100, Scamadviser: 1/100), aligning with its classification as a high-risk threat. While the exact content of the site remains unanalyzed, the page title 'Home' and scam type designation suggest a generic crypto fraud scheme rather than a targeted phishing kit. Defenders should treat this domain as confirmed malicious. Recommended actions include blocking resolution at DNS level, monitoring for outbound connections to 198.12.80.250, and reviewing logs for interactions from internal networks. The domain's continued activity as of July 12, 2026, warrants immediate inclusion in threat intelligence feeds and endpoint protection rules.