europe-unionplc[.]us

The domain europe-unionplc.us is a confirmed phishing site engaged in brand impersonation, specifically targeting the financial services brand 'across'. This site posed an elevated risk by mimicking legitimate digital banking platforms to deceive users into disclosing sensitive information. As of the latest verification, europe-unionplc.us has been taken offline, though it previously operated without a crypto drainer kit.

Technical analysis reveals that europe-unionplc.us was flagged by 3 of 95 security vendors on VirusTotal, including alphaMountain.ai, BitDefender, and G-Data. The domain was registered through OwnRegistrar, Inc. on September 6, 2024, and resolved to the IP address 163.61.188.89, hosted under AS153568 (NEW DHAKA HARDWARE) in the US. It appeared on one security blocklist, PhishDestroy, and had no SSL certificate. The observed page title was 'Europe Union plc - Dedicated to innovating, simplifying, and humanizing digital banking'. Nameservers were listed as null vip1.cupisweb.com and vip2.cupisweb.com, and the Gridinsoft trust score was 0/100.

Users who may have interacted with europe-unionplc.us should immediately change any credentials entered on the site, particularly if they pertain to financial or banking services. Enable two-factor authentication (2FA) on all relevant accounts to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized transactions or login attempts. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader takedown efforts. If financial data was exposed, contact the affected institution for further guidance.