onlinestore[.]green

The domain onlinestore.green has been identified as a brand impersonation phishing infrastructure targeting the entity 'across.' Analysis confirms the domain is currently offline, though it previously hosted content under the page title 'TK-Store | buy, sell and discover on TK,' suggesting an attempt to deceive users into engaging with fraudulent transactions or account credentials. Infrastructure analysis reveals the domain was registered on May 7, 2025, through DNSPod, Inc., and resolves to the IP address 38.85.201.48, hosted on AS8796 (FASTNET DATA INC) in the United States. Security vendor assessments indicate 16 of 95 detection engines on VirusTotal flagged the domain as malicious. The domain appears on two security blocklists, including PhishDestroy and PhishingDB. Notably, the domain lacks an SSL certificate, further reducing its legitimacy and increasing exposure to interception risks. Current status indicates the domain has been taken offline, though residual risk remains for users who may have interacted with it prior to deactivation. Organizations are advised to update web filtering rules to block the domain and associated IP address. Security teams should monitor for related infrastructure, such as newly registered domains with similar naming patterns or shared hosting providers. End users who accessed the domain should be instructed to reset credentials and review accounts for unauthorized activity, particularly those associated with the impersonated brand.