crad[.]builltt[.]com

The domain crad.builltt.com is classified as a brand‑impersonation site targeting the generic "across" brand. It was registered on September 26, 2025 through Dynadot LLC and is currently taken offline. DNS resolution points to the IPv4 address 198.23.193.170, which is hosted by HostPapa (AS36352) in the United States. The authoritative nameservers are dns1.geebytesdns.com and dns2.geebytesdns.com. No TLS certificate is presented for the site, indicating that connections would be unencrypted if the service were active.

The page title retrieved during the last crawl reads "First commercial bank - Dedicated to innovating, simplifying, and humanizing dig", suggesting the use of financial‑oriented copy to lure victims. A technology fingerprint shows the presence of Bootstrap, LiteSpeed web server, GSAP animation library, Smartsupp live‑chat widget, OWL Carousel, jQuery, and support for HTTP/3, all of which are common in legitimate sites but do not mitigate the malicious intent. The domain appears on a single security blocklist and has been flagged by PhishDestroy. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100.

VirusTotal analysis reports that 10 of 95 scanning engines identify the domain as malicious, reinforcing the suspicion of fraudulent activity. While the site is currently offline, its infrastructure—particularly the hosting IP and nameserver pair—remains viable for future re‑activation. Defensive recommendations include adding the domain, its A record (198.23.193.170), and the associated nameservers to network blocklists, enforcing DNS sinkholing for the domain, and monitoring the hosting provider for any new domains that reuse the same IP or nameserver configuration. Continuous re‑scanning of the domain should be scheduled to detect any changes in status or additional detections from security vendors.