fexoviontech-com[.]cryptofinancetrack[.]com

This domain, fexoviontech-com.cryptofinancetrack.com, is identified as a high-risk brand impersonation threat specifically targeting Across, a recognized cryptocurrency platform. The site, currently offline, presented itself as the official application portal for FEXOVION, using the page title 'FEXOVION ™ - The Official App WebSite 2025 [UPDATED]' to deceive users into believing it was a legitimate service. Analysis indicates this is a deliberate attempt to exploit the Across brand for fraudulent purposes, likely involving credential harvesting or crypto asset theft. Infrastructure analysis reveals multiple critical indicators. The domain was registered on January 30, 2025, through MainReg INC and resolves to the IP address 104.26.1.240, hosted on Cloudflare's network (AS13335). It lacks an SSL certificate, a common red flag for malicious sites. Security vendors have flagged this domain extensively, with 22 out of 95 VirusTotal vendors marking it as malicious. Additionally, it appears on one security blocklist and is blocked by PhishDestroy, while Google Safe Browsing explicitly flags it as a phishing site. The domain's creation date and rapid inclusion on blocklists suggest a coordinated effort to deploy and scale the threat quickly. As of the latest assessment, fexoviontech-com.cryptofinancetrack.com has been taken offline, mitigating immediate risks to users. However, organizations and individuals should remain vigilant. It is recommended to monitor for similar domains registered through MainReg INC or resolving to the same IP range. Users who may have interacted with this site should immediately revoke any connected wallet permissions, change credentials for associated accounts, and scan their systems for malware. Network administrators should update blocklists to include this domain and its associated IP address to prevent future access attempts.