crdtrove[.]com

The domain crdtrove.com is identified as a phishing threat, with 3 out of 91 VirusTotal vendors flagging it as malicious. Despite its recent takedown, it initially operated from an IP hosted by CloudFlare, Inc. in Canada. The domain was registered with NICENIC INTERNATIONAL GROUP CO., LIMITED and had an SSL certificate issued by Google Trust Services.

This domain's malicious activity was detected by PhishDestroy and added to public blocklists. The swift action to take the domain offline reflects its potential threat level, as it was actively engaging in phishing activities. The registration and hosting details point to a common pattern seen in phishing operations, where domains are set up with international registrars and hosted by well-known providers to lend a veneer of legitimacy.

The presence of crdtrove.com on a public blocklist and its flagging by multiple security vendors underscore the importance of proactive threat detection. PhishDestroy's early identification of such domains is crucial in mitigating the risks associated with phishing scams. The domain's takedown mitigates immediate threats, but it highlights the ongoing challenge of monitoring and responding to new phishing domains as they emerge.