shell-strange-43[.]vercel[.]app

PhishDestroy identifies shell-strange-43.vercel.app as a high-risk brand impersonation threat actively impersonating the brand 'across'. This domain is currently active and presents a significant danger to users who may be misled into believing it is a legitimate service. The page title 'Slashdot: News for nerds, stuff that matters, & software' is used as a decoy to appear benign, while the underlying intent is to harvest credentials or distribute malware under the guise of a trusted brand.

Technical analysis reveals that the domain was registered through Tucows Domains Inc. on February 22, 2026, and resolves to IP address 216.198.79.195. VirusTotal reports that 1 out of 95 security vendors flag this domain as malicious, and it appears on 3 security blocklists. The SSL certificate is issued by Google Trust Services (WR1), which adds a false layer of legitimacy. These indicators collectively confirm the domain's malicious nature and its active exploitation.

To mitigate this threat, users and organizations should immediately block access to shell-strange-43.vercel.app and add it to their DNS filtering or web proxy blocklists. Since this is a brand impersonation attack targeting 'across', affected brand users should be notified and instructed to verify URLs carefully before entering any credentials. PhishDestroy recommends monitoring for any similar domains and reporting this domain to the hosting provider, Vercel, for takedown.