alternativebrokage[.]net

This domain, alternativebrokage.net, is actively impersonating the Across brokerage platform, as indicated by its classification as a brand_impersonation threat. Registered on November 6, 2025, through Cosmotown, Inc., the domain resolves to IP address 194.36.184.12 and is hosted on an Apache HTTP Server. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious domains. The page title, 'Next Level Pro Traders,' does not directly reference Across but aligns with tactics used in financial scam operations to appear professional or exclusive. Analysis reveals the domain is flagged by 4 of 95 security vendors on VirusTotal and holds a trust score of 1/100 on Scamadviser and 0/100 on Gridinsoft, indicating low credibility. It appears on three security blocklists and has been included in 23 threat intelligence pulses on AlienVault OTX, suggesting broader recognition of its malicious nature. Defenders should note that the domain is currently blocked by PhishDestroy, OISD, and BLP-Malware, reinforcing its high-risk status. The registration infrastructure and hosting provider may warrant further investigation, though no specific adversary attribution is confirmed at this time. Defenders are advised to treat this domain as hostile and implement blocking at the DNS or network level. Additional monitoring for related domains registered through the same provider or resolving to the same IP may help identify connected infrastructure. The exact content and functionality of the site remain unanalyzed, so further inspection is recommended if access logs indicate user interaction.