quizz-001[.]pages[.]dev

This domain, quizz-001.pages.dev, is currently flagged as an active brand impersonation threat targeting the Across platform. Analysis indicates the infrastructure is designed to deceive users by mimicking legitimate Across services, potentially facilitating unauthorized access or asset compromise. The page title, 'Learn,' suggests an attempt to lure victims under the guise of educational or promotional content related to the targeted brand. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc., and resolves to the IP address 188.114.96.3, hosted on AS13335 (Cloudflare, Inc.) in the United States. The domain was created on March 03, 2026, though this date may reflect a misconfiguration or deliberate obfuscation. Detection metrics show minimal coverage, with only 1 of 95 security vendors on VirusTotal flagging the domain as malicious. However, it appears on three independent security blocklists, indicating prior identification as a threat. The SSL certificate is issued by Let's Encrypt, a common practice among both legitimate and malicious domains to establish encrypted connections. As of the latest assessment, quizz-001.pages.dev remains active and poses a high risk to users. Organizations and individuals are advised to block the domain at the network level and update endpoint protection rules to include this indicator of compromise. Users should verify the authenticity of any communication or service claiming affiliation with Across by cross-referencing official channels. Security teams are encouraged to monitor for additional domains or IPs associated with this infrastructure, particularly those leveraging Cloudflare registrations or similar hosting patterns. Immediate reporting to relevant security communities is recommended to mitigate further exposure.