cryptoleads-inc[.]com

On July 24 2026, cryptoleads-inc.com was identified as a brand‑impersonation infrastructure that targets the “across” brand family. The domain was registered through Dynadot LLC on 15 October 2023 and currently resolves to the IPv4 address 8.39.235.63, which is allocated to Tier.Net Technologies LLC (AS 397423) in the United States. DNS resolution is handled by ns3.vebhost.com and ns4.vebhost.com. No TLS certificate is presented for the host, indicating that the site operated without HTTPS. The page title returned by the server is “cryptolead‑inc.com”, which differs slightly from the registered domain name, suggesting a possible typographical variation used in the lure.

Reputation services flag the domain as highly suspicious. Gridinsoft assigns a trust score of 0 out of 100, and Scamadviser reports a trust score of 1 out of 100. VirusTotal has recorded detections from seven of ninety‑five scanning engines, confirming that multiple security vendors consider the site malicious. The domain is listed on at least one public security blocklist and is actively blocked by the PhishDestroy mitigation service.

The infrastructure appears to be offline at the time of analysis, which limits real‑time verification of page content or payload. Consequently, the exact phishing kit, credential‑capture mechanisms, or additional command‑and‑control endpoints remain unknown. Defenders should continue to monitor the IP address 8.39.235.63 and the associated nameservers for any re‑activation, enforce blocking of the domain and its IP in perimeter defenses, and include the domain in threat‑intel feeds. Organizations that reference the “across” brand should educate users about the possibility of impersonation attempts originating from this domain, even though the site is presently inactive.