780432-crypto[.]com

The domain 780432-crypto.com is identified as a brand impersonation threat targeting Crypto.com, a cryptocurrency exchange platform. Analysis indicates the domain was designed to mimic legitimate support channels, as evidenced by its page title, 'Crypto.com | Support.' This domain is currently offline, but prior activity suggests it was used for phishing campaigns aimed at harvesting user credentials or financial information. Infrastructure analysis reveals the domain was registered through NiceNIC International Group Co., Limited, and resolved to the IP address 188.114.96.3. The domain was created on February 21, 2026, an anomalous date likely indicative of incorrect WHOIS records or domain spoofing. Detection metrics show the domain was flagged by 3 of 95 security vendors on VirusTotal, and it appears on one security blocklist. The SSL certificate is issued by Google Trust Services (WE1), which, while legitimate, does not mitigate the domain's malicious intent. The domain is currently offline, reducing immediate risk to users. However, organizations and individuals should remain vigilant for similar impersonation attempts. Recommended actions include blocking the domain and its associated IP at the network level, monitoring for related domains registered through the same registrar, and educating users on verifying official support channels. Security teams should also review logs for any prior connections to 188.114.96.3 to assess potential exposure.