castlecrashers[.]fun

PhishDestroy has flagged castlecrashers.fun as an active brand impersonation domain suspected of hosting a credential theft campaign. The site masquerades as Castle Crashers, a popular indie game, to trick users into revealing login credentials or payment details. Initial risk is under investigation but remains classified as active due to the domain's recent registration and suspicious infrastructure.

This domain resolves to IP 172.67.141.102 and was registered on March 26, 2024 through HOSTINGER operations, UAB. While VirusTotal currently shows 0/95 detections—indicating it has evaded immediate automated detection—its use of a Let’s Encrypt SSL certificate and clean initial scan suggest an evolving threat. The combination of a newly minted domain, hosting affiliate infrastructure, and impersonation of a trusted brand creates a significant risk profile for unsuspecting users.

To mitigate exposure, avoid interacting with castlecrashers.fun and report the domain to your email provider, browser, and local cybersecurity teams. Validate official channels (e.g., steam.com/castlecrashers) before entering any credentials. Enable two-factor authentication on gaming and payment accounts linked to Castle Crashers. Monitor financial statements and change passwords immediately if you suspect interaction.