MALICIOUS — CRITICAL
crestivon[.]com
Analysis of crestivon.com, observed on July 24, 2026, shows a high‑risk generic phishing indicator.
- VirusTotal
- 3/91
- Blocklists
- No stored match
- Ketersediaan
- Terakhir diketahui aktif · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse-contact@publicdomainregistry.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
crestivon.com — Terakhir diketahui aktif (HTTP 200). Ringkasan bukti: VirusTotal 3/91 (CRDF, Gridinsoft, Netcraft); PhishDestroy score 74/100. Registrar: PDR.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Evidence Analysis
Is crestivon.com a Phishing Site?
Analysis of crestivon.com, observed on July 24, 2026, shows a high‑risk generic phishing indicator.
Analysis of crestivon.com, observed on July 24, 2026, shows a high‑risk generic phishing indicator. The site resolves to IP 82.25.83.107, which belongs to AS47583 Hostinger International Limited in the United States, and the hosting provider is identified as Hostinger. The domain was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com, using the nameservers ns1.dns-parking.com and ns2.dns-parking.com. The TLS certificate is issued by Let’s Encrypt (R13), and the HTTP response returns status code 200, confirming that the web service is reachable.
The page title returned by the server is "Crestivon: Home," and technical fingerprinting reveals PHP, Bootstrap, LiteSpeed, jQuery, and HTTP/3 as the underlying technologies. Reputation services flag the domain as extremely untrustworthy: Scamadviser assigns a trust score of 1 out of 100, and Gridinsoft records a score of 0 out of 100. The domain appears on one security blocklist, specifically PhishDestroy, indicating that at least one anti‑phishing consortium has taken action against it. VirusTotal analysis shows that 2 of 93 security vendors have flagged the domain, providing additional confirmation of malicious intent.
While the exact phishing payload or credential‑harvesting page has not been publicly disclosed, the combination of low trust scores, blocklist inclusion, and vendor detections strongly suggests active exploitation. Defenders should block DNS resolution for crestivon.com, enforce URL filtering on corporate proxies, and monitor outbound connections to 82.25.83.107. Continuous re‑evaluation is recommended as additional detection data may emerge, but current evidence warrants immediate mitigation.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Cakupan data13 recorded checks
Sinyal Keamanan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 6 identified
Server-side scripting language designed for web development.
Popular CSS framework for responsive, mobile-first web development.
High-performance web server compatible with Apache configurations.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of crestivon.com · checked Mar 2, 2026
Bukti & Laporan EksternalIndependent lookups and source reports
BKF-20260704-14 Recipient: abuse-contact@publicdomainregistry.com Victim safety and official reportingImmediate actions and verified reporting channels
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.