assetbuilderslimited[.]com

This domain, assetbuilderslimited.com, is currently under investigation for brand impersonation targeting the entity 'across.' The site remains active and has not yet been flagged by security vendors for overt malicious activity, though its infrastructure and registration details raise concerns. Analysis indicates the domain was registered on April 19, 2025, through Atak Domain and resolves to the IP address 198.12.66.123, hosted on AS36352 (HostPapa) in the United States. Despite its recent creation, the domain has been added to one security blocklist, though VirusTotal reports zero detections out of 95 vendors. Notably, the domain lacks an SSL certificate, a common red flag in fraudulent or impersonation schemes. Infrastructure analysis reveals additional indicators of potential compromise. The domain’s registration through Atak Domain, a registrar frequently associated with high-risk domains, aligns with patterns observed in brand impersonation campaigns. The absence of an SSL certificate further undermines trust, as legitimate financial or corporate entities typically enforce HTTPS encryption. The IP address 198.12.66.123 has not been widely flagged in threat intelligence feeds, but its association with HostPapa’s AS36352—an autonomous system occasionally linked to low-reputation hosting—warrants closer scrutiny. The page title, which mirrors the domain name itself, is another atypical characteristic, often employed to mimic legitimate login portals or corporate sites. At present, assetbuilderslimited.com remains active and accessible, though its risk profile is elevated due to the aforementioned indicators. Organizations and users are advised to treat this domain with caution, particularly if encountered in unsolicited communications or redirects. Immediate steps should include blocking the domain at the network level, monitoring for phishing attempts referencing 'across,' and verifying any communications purportedly originating from this entity through independent, trusted channels. Given the domain’s recent registration and lack of SSL, security teams are encouraged to conduct further analysis, including behavioral monitoring of associated IPs and domain reputation checks, to preempt potential exploitation.