0000h00003[.]byethost7[.]com

The domain 0000h00003.byethost7.com has been identified as a brand impersonation threat specifically targeting the brand Across. This domain was designed to deceive users by mimicking legitimate services associated with Across, potentially leading to credential theft or other malicious activities. The domain is currently offline, but its prior activity poses a risk to users who may have encountered it.

Technical analysis reveals that this domain has a VirusTotal score of 15 out of 95 security vendors flagging it as malicious, indicating a strong consensus among security tools. It was registered through NameCheap, Inc. and resolves to IP address 185.27.134.24. The domain was created on February 28, 2006, and its SSL certificate is issued by ZeroSSL ECC Domain Secure Site CA. It appears on 2 security blocklists, and Google Safe Browsing likely flagged it before takedown. The page title displayed a DNS resolution error, confirming the domain is no longer active.

Currently, the domain is offline and has been taken down, which mitigates immediate risk. However, users who visited the site earlier may have been exposed to phishing attempts. PhishDestroy recommends monitoring for any suspicious activity related to Across accounts and avoiding clicking on unsolicited links. Remaining risk is low due to the domain's inactive status, but vigilance is advised as similar domains may emerge.