assetspacifics[.]ltd

This domain, assetspacifics.ltd, has been identified as a brand impersonation phishing site specifically targeting the Across protocol. Analysis indicates the domain was designed to deceive users into believing they were interacting with official Across platform resources. As of the latest verification, the domain has been taken offline, though prior activity remains a concern for retrospective threat analysis. Infrastructure analysis reveals the domain was registered through Dynadot LLC on April 09, 2024, and resolved to the IP address 198.27.109.53, hosted on AS16276 (OVH SAS) in Canada. Detection metrics show 14 of 95 security vendors on VirusTotal flagged the domain as malicious, while it appeared on one additional security blocklist. The SSL certificate was issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites. The page title, matching the domain name, further suggests a lack of effort to mimic legitimate branding, a tactic sometimes used to evade automated detection systems. While assetspacifics.ltd is currently offline, organizations and users should remain vigilant for similar impersonation attempts. Network defenders are advised to review logs for connections to 198.27.109.53 and monitor for newly registered domains under the same registrar or hosting provider. Users who may have interacted with the domain should verify account integrity and report any suspicious activity to relevant security teams. Proactive blocking of the domain and associated IP at perimeter defenses is recommended as a precautionary measure.