croday[.]top

The domain croday.top is identified as a generic phishing site, specifically targeting cryptocurrency users. The site, which was observed with the page title 'REWARD Portal v2 -- Latest Web3 Wallets', poses a significant risk as it could be used to steal sensitive information or cryptocurrency from unsuspecting visitors. The domain is currently taken offline, but it remains important for users who may have interacted with it to take necessary precautions.

Technical indicators for croday.top include detections by 2 of 95 VirusTotal vendors, including Fortinet and Gridinsoft. The domain was registered through NiceNIC International Group Co., Limited on October 08, 2025, and resolves to the IP address 209.94.90.1, which is located in the US under the AS40680 Protocol Labs. The site appears on 1 security blocklist, specifically PhishDestroy, and does not have an SSL certificate. These factors contribute to an elevated risk level for the domain.

Users who have interacted with croday.top should take immediate steps to protect their assets and personal information. For those who may have used a Web3 wallet, it is recommended to revoke any token approvals and move funds to a new, secure wallet. If any credentials were entered, change the passwords immediately and enable two-factor authentication. Additionally, users should monitor their accounts for any unauthorized transactions or activity. To report this phishing site, users can submit the domain to PhishDestroy or other reputable security organizations for further analysis and action.