gho-v4[.]com[.]pendelfi[.]com

Analysis of gho-v4.com.pendelfi.com confirms its classification as a wallet seed phishing domain targeting the Across protocol. The subdomain was registered on February 21, 2026, and is currently offline as of July 25, 2026. It appears on one security blocklist (PhishDestroy) and is flagged by 2 of 93 security vendors on VirusTotal, indicating elevated risk despite limited detection coverage. The domain's SSL certificate is classified as R13, a non-standard designation that may warrant further scrutiny.

The page title, 'Home | Meteora,' does not match the impersonated brand (Across), suggesting either a misconfiguration or an attempt to obscure the phishing intent. Gridinsoft assigns a trust score of 0/100, reinforcing the domain's malicious classification. No hosting provider, IP address, or autonomous system number (ASN) is currently associated with the domain in available intelligence.

Defenders should treat this domain as confirmed malicious infrastructure, particularly in environments where Across-related assets are present. The absence of active hosting precludes further HTTP analysis, but historical records or passive DNS may reveal additional indicators. Given the domain's offline status, monitoring for reactivation or related domains with similar naming patterns (e.g., 'gho-v4') is recommended for proactive threat mitigation.