crescentpips[.]ltd

This domain, crescentpips.ltd, was registered on 21 February 2026 through Global Domain Group LLC and is currently resolvable to IP 163.61.188.5, an address owned by AS153568 NEW DHAKA HARDWARE located in the United States. The site presents a page titled “Join a modern chama where your money works for you. No trading skills needed — our experts and smart bots handle everything.” The content explicitly references a financial offering and is classified as a crypto‑scam. The domain is listed on a public security blocklist and has been cited in two AlienVault OTX pulses, indicating prior observation by the community. A Google Trust Services / WE1 TLS certificate is active, and the site returns HTTP 200. Security telemetry shows a Gridinsoft trust score of 0 / 100 and a single detection by one of ninety‑five VirusTotal scanners. Cloudflare’s authoritative name servers (bill.ns.cloudflare.com, adelaide.ns.cloudflare.com) are in use. While the page title and classification suggest a brand‑impersonation campaign targeting the “across” brand, the exact visual or credential‑collection mechanisms have not been captured. Defenders should block the domain at the DNS and proxy layers, monitor outbound connections to the associated IP, and add the host to any existing phishing‑or‑scam watchlists. Ongoing observation of the IP’s activity and periodic re‑scanning with multiple AV engines are recommended to detect any payload evolution.