my[.]crescentmpb[.]com

Analysis of the domain my.crescentmpb.com indicates it was created on 14 November 2024 and is currently offline. The domain resolves to IP address 192.3.190.186, which belongs to AS36352 operated by HostPapa in the United States. Nameserver records list dns1.webproserver.com and dns2.webproserver.com, and the registration was performed through OwnRegistrar, Inc. The site presented the page title "Crescent Metro – Crescent Metro Credit Union," suggesting an attempt to impersonate the Crescent Metro Credit Union brand.

No SSL certificate was observed, leaving the site without HTTPS protection. Gridinsoft assigned a trust score of 0 out of 100, indicating a high likelihood of malicious intent. The domain has been blocked by the PhishDestroy service and appears on a single security blocklist.

VirusTotal reports that the domain was scanned by 95 vendors, none of which flagged it, though the absence of detections does not confirm safety. The available evidence points to a typical phishing infrastructure that leverages inexpensive hosting and a generic registrar, but the exact payload or credential‑stealing mechanisms remain unknown because the site content was not captured before takedown. Defenders should continue to block the domain and its associated IP, add the host to internal deny lists, monitor other domains registered through the same registrar or using the same nameservers, and enforce TLS inspection to detect any future attempts to serve similar content over encrypted channels.