acrestbk[.]com

This domain is identified as a credential-theft phishing site designed to impersonate a financial institution under the name 'Acrest Bank.' The page employs social engineering tactics, presenting itself as a legitimate banking portal with the title 'Acrest Bank- Your New Favorite Bank' to deceive users into submitting sensitive login credentials, personal identification details, or financial information. Such infrastructure is commonly used to facilitate account takeovers, unauthorized transactions, or identity fraud targeting unsuspecting banking customers. Analysis indicates the domain exhibits multiple high-risk indicators. It is registered through Ultahost, Inc., and resolves to the IP address 82.25.102.219. The domain was created on December 12, 2025, suggesting a short operational lifespan typical of phishing campaigns. Detection engines flagged the domain in 11 out of 95 security scans on VirusTotal, and it appears on one security blocklist. The site uses a Let's Encrypt SSL certificate, PHP, and Bootstrap, which are frequently observed in both legitimate and malicious web infrastructure. The presence of tracking technologies such as Smartsupp further supports the likelihood of user interaction monitoring. Users who accessed or entered information on acrestbk.com should assume their credentials or personal data have been compromised. Immediate actions include resetting passwords for any accounts accessed from the site, enabling multi-factor authentication where available, and monitoring financial statements for unauthorized activity. Affected individuals are advised to report the incident to their financial institution and relevant cybersecurity authorities. Browser-based security tools should be updated to block future access to the domain, and users should remain vigilant for follow-up phishing attempts via email or messaging platforms.