crownless-game[.]app

The domain crownless-game.app was a phishing site engaged in brand impersonation targeting users of the 'across' platform. It posed an elevated risk by mimicking the legitimate brand to deceive victims into disclosing sensitive information or interacting with fraudulent content. No crypto drainer kit was identified in this campaign. The site is currently taken offline, reducing immediate exposure, but prior visitors may remain at risk.

Technical indicators confirm crownless-game.app as malicious. VirusTotal reported 3 of 95 security vendors flagged the domain, including Gridinsoft, Seclookup, and SOCRadar, with a Gridinsoft trust score of 0/100. The domain was registered through Cloudflare, Inc., and resolved to the IPv6 address 2606:4700:3031::ac43:cc65, hosted on Cloudflare's US network (AS13335). It appeared on one security blocklist, PhishDestroy, and had no SSL certificate issued. The observed page title was 'Crownless', and nameservers were corey.ns.cloudflare.com and kami.ns.cloudflare.com. No creation date or SSL issuer details were available.

Individuals who visited crownless-game.app should immediately change any passwords or credentials entered on the site, particularly for accounts associated with 'across'. Enable two-factor authentication (2FA) on all sensitive accounts to mitigate unauthorized access. Monitor financial and transactional activity for signs of fraud. Report the phishing domain to relevant authorities or platforms, such as Google Safe Browsing, anti-phishing organizations, or the impersonated brand's security team to aid in broader mitigation efforts.