Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@godaddy.com.
The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
invest[.]crowncreditunions[.]com
“CrownCrypto Global Investment | CFD Trading — Trading on Stocks, Gold, Oil, Indices”
invest.crowncreditunions.com — 확인되지 않음. 브랜드 사칭: Genericscam; 사기 유형: Generic Phishing. 증거 요약: VirusTotal 15/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar); URLQuery 1 alert; URLScan malicious verdict; PhishDestroy score 95/100. 등록기관: GoDaddy.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
The domain invest.crowncreditunions.com is currently classified as a generic phishing site with a high risk rating. The site returns HTTP 200 and presents a page titled “CrownCrypto Global Investment | CFD Trading — Trading on Stocks, Gold, Oil, Indices”. The content mimics legitimate financial services to lure victims into providing credentials. Infrastructure analysis shows the domain resolves to IP address 194.36.191.196, which is hosted in the Netherlands and belongs to AS60117 operated by Host Sailor Ltd. The authoritative nameservers are ns5.nl.hostsailor.com and ns6.nl.hostsailor.com. A Let’s Encrypt certificate is in use, indicating the presence of TLS but offering no trust beyond encryption. Detection data indicate the domain is listed on one security blocklist and has been flagged by PhishDestroy. The Gridinsoft trust score is 0 out of 100, reflecting a severe lack of reputation. VirusTotal scans show 11 out of 95 security vendors flag the domain as malicious, corroborating the phishing assessment. The domain was registered on January 6, 2022 through GoDaddy.com, LLC. Defenders should add invest.crowncreditunions.com to network deny lists and ensure email gateways block references to the domain. Continuous monitoring of the associated IP address and its host range is advised, as the same infrastructure may host additional malicious payloads. Where possible, sinkholing the domain or redirecting traffic to a safe page can disrupt the campaign and provide telemetry for further investigation.
네트워크 보안 인텔리전스
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | invest.crowncreditunions.com |
malicious | Sinkholed |
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
Registration: crowncreditunions.com
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For the registrable domain crowncreditunions.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 분석
증거 및 외부 보고서
PD-20260619-0A3D3E Recipient: abuse@godaddy.com 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.