cmgstfx[.]net

This domain, cmgstfx.net, is identified as a brand impersonation threat targeting Across, a platform commonly associated with cross-chain bridging services. The site mimics legitimate Across branding to deceive users into interacting with fraudulent interfaces, potentially leading to credential theft, unauthorized transactions, or exposure to malicious smart contracts. The impersonation tactic suggests an intent to exploit trust in the Across brand to facilitate financial fraud or data compromise. Analysis indicates cmgstfx.net was registered on November 3, 2025, through Internet Domain Service BS Corp, a registrar frequently associated with high-risk domains. The domain resolves to the IP address 82.221.129.24 and is flagged by 4 out of 95 security vendors on VirusTotal. It appears on two security blocklists, including PhishDestroy and OISD, and has a trust score of 0/100. Detected technologies include WordPress, MySQL, PHP, and LiteSpeed, which are often leveraged to deploy phishing kits or malicious payloads. The page title, comgestfx, further deviates from legitimate Across branding, reinforcing its fraudulent nature. Users who visited cmgstfx.net should immediately cease all interactions with the domain and any associated links. If credentials or sensitive information were entered, reset passwords for all affected accounts, enable multi-factor authentication, and monitor for unauthorized activity. Review connected wallets or financial accounts for suspicious transactions, as brand impersonation domains often deploy crypto drainers or credential harvesters. Report the domain to relevant security teams and consider revoking permissions for any connected decentralized applications. Infrastructure analysis reveals the domain is currently offline, but users should remain vigilant for similar impersonation attempts.