fastbouncer[.]live

The domain fastbouncer.live is identified as a brand_impersonation threat targeting the Across platform. Currently, the domain is offline, but prior activity suggests it was designed to deceive users by mimicking legitimate Across services. Analysis indicates this domain was operational for a limited period before detection and subsequent takedown measures were enacted. Infrastructure analysis reveals the domain was registered on May 2, 2025, through GoDaddy.com, LLC, and resolved to the IP address 72.167.39.164, hosted within the United States under autonomous system AS26496. The domain was flagged by 18 of 95 security vendors on VirusTotal, indicating widespread recognition of its malicious nature. Additionally, it appeared on two security blocklists, PhishDestroy and PhishingDB, and lacked a valid SSL certificate, further reducing its legitimacy. The page title associated with the domain was FastBouncer, which does not align with known Across branding or services. Current status confirms the domain has been taken offline, likely due to enforcement actions or voluntary suspension. However, the infrastructure remains a potential risk for future misuse. Organizations are advised to monitor for residual DNS queries or cached references to this domain. Network defenders should update blocklists to include fastbouncer.live and its associated IP address, 72.167.39.164, to prevent accidental access. Users who may have interacted with the domain should verify account integrity, reset credentials, and review transaction logs for unauthorized activity. Proactive measures, such as domain monitoring and employee awareness training, are recommended to mitigate similar threats.