authmeta[.]com-inspect[.]site

The domain authmeta.com-inspect.site is a confirmed phishing site engaged in brand impersonation, specifically targeting the brand 'across'. This site posed an elevated risk as a credential or login phishing scam, designed to deceive users into entering sensitive information under the false pretense of legitimacy. No crypto drainer kit was associated with this campaign. As of the latest verification, authmeta.com-inspect.site has been taken offline, though users who interacted with it should remain cautious.

Technical indicators confirm the malicious nature of authmeta.com-inspect.site. The domain was flagged by 15 of 95 VirusTotal security vendors, including ADMINUSLabs, Criminal IP, and BitDefender, and appeared on 1 security blocklist (PhishDestroy). It was registered through Atak Domain on November 05, 2025, and resolved to the IP address 103.149.252.110, hosted by VIET DIGITAL TECHNOLOGY LIABILITY COMPANY (AS135918) in Vietnam. The domain lacked an SSL certificate, and its nameservers were mallory.ns.cloudflare.com and osmar.ns.cloudflare.com. The observed page title, 'Furniture Next App - Somor Mk', did not align with the impersonated brand, further indicating its deceptive purpose.

Users who visited authmeta.com-inspect.site should immediately change any passwords entered on the site and enable two-factor authentication (2FA) on all affected accounts to prevent unauthorized access. Monitor financial and personal accounts for signs of fraud or unusual activity. Report the phishing domain to platforms such as Google Safe Browsing, the Anti-Phishing Working Group (APWG), or the impersonated brand's official security team to aid in mitigation efforts.