crest-crditunion[.]com

This report analyzes the domain crest-crditunion.com, which resolves to IP address 198.12.80.250 in the US, hosted on AS36352 HostPapa. The site's page title is "404 Not Found," indicating no active content is served. Based on the domain name, it impersonates a credit union brand to deceive users into believing it is a legitimate financial institution. The threat posed is phishing or credential theft, as users may attempt to access banking services and expose sensitive login information.

Technical evidence shows VirusTotal flagged this domain with 12 out of 95 security vendors detecting it as malicious. Specific vendors include alphaMountain.ai, BitDefender, CyRadar, ESET, and Fortinet. The domain is listed on one blocklist. It was registered on 2025-07-24 via registrar Dynadot LLC. The SSL certificate is issued by Google Trust Services (WE1). The domain uses only one nameserver. ScamAdviser assigns a trust score of 1 out of 100, and GridinSoft assigns 0 out of 100.

Currently, the domain is down or offline, indicating it may be inactive or blocked. The risk level is high due to the combination of a recent creation date, low trust scores, and detection by multiple security vendors. Although offline, the domain remains a significant threat if reactivated for phishing campaigns targeting credit union customers.