ventroxibnk[.]com

On July 23, 2026, the domain ventroxibnk.com was observed offline but remains flagged by multiple security controls. The site was registered on February 21, 2026 through OwnRegistrar, Inc. and resolves to the IP address 107.172.61.186, which belongs to AS36352 hosted by HostPapa in the United States. The TLS certificate presented is identified as R13, and the page title retrieved from the live host reads “Ventroxibnk - Dedicated to innovating, simplifying, and humanizing digital banking.” The content suggests a crypto‑related financial service, and the domain is classified as a crypto scam that impersonates the brand “Across.” Detection engines on VirusTotal reported that 8 of 93 scanning vendors flagged the domain as malicious. Independent blocklists, including PhishDestroy and CryptoFirewall, have listed the domain, and it appears on two additional security blocklists.

Gridinsoft assigned a trust score of 0 out of 100, indicating extreme suspicion. AlienVault OTX has correlated the domain with five threat‑intelligence pulses, reinforcing its reputation as a malicious indicator. The current offline status does not guarantee removal of the underlying infrastructure; the hosting provider and IP address may be reused for future campaigns.

Defenders should continue to block the domain at perimeter and DNS layers, monitor the associated IP range for anomalous traffic, and add the host to internal blacklists. Additional analysis of the SSL certificate chain and any residual HTTP responses is recommended to confirm the absence of active payloads. Until further forensic evidence is collected, the domain should be treated as a high‑confidence indicator of a crypto‑scam campaign targeting users who trust the “Across” brand.