crestdynasty[.]com

The domain crestdynasty.com is a confirmed phishing site engaged in brand impersonation targeting users of the platform 'across'. It was designed to deceive victims into believing they were interacting with the legitimate 'across' service, likely for credential theft or fraudulent transactions. No crypto drainer kit was identified. As of the latest verification, crestdynasty.com has been taken offline.

Technical indicators confirm the malicious nature of crestdynasty.com. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft (trust score 0/100) and Netcraft. It appears on 1 security blocklist, specifically PhishDestroy. Registered through Cosmotown, Inc. on April 12, 2025, the domain resolved to the IP address 23.95.132.226, hosted on AS36352 (HostPapa) in the US. The site had no SSL certificate, and its observed page title was 'Crest Dynasty'. Nameservers were limited to 1.

Victims who interacted with crestdynasty.com should immediately change passwords for any accounts accessed through the site, particularly those linked to 'across'. Enable two-factor authentication (2FA) on all sensitive accounts to prevent unauthorized access. Monitor financial statements and transaction histories for signs of fraud. Report the phishing domain to the impersonated brand's security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in takedown efforts.