msndex[.]pages[.]dev

This domain, msndex.pages.dev, is flagged as a confirmed phishing site specializing in brand impersonation targeting the Across Protocol. Analysis indicates the site presented a fraudulent 'Server Verification' interface, a common tactic to deceive users into disclosing credentials or wallet recovery phrases. No direct association with a known drainer kit was identified, though the impersonation of a cross-chain bridging service suggests intent to exploit users during token transfers or authentication processes. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on February 21, 2026, and resolves to the IP address 172.66.44.174. Detection metrics include a VirusTotal score of 12/95 security vendors, with active listings on two blocklists. The domain employed Google Trust Services for SSL certification and leveraged Cloudflare’s infrastructure, including HTTP/3 and HSTS enforcement, to enhance perceived legitimacy. Despite its offline status, historical records confirm its presence on ScamSniffer and PhishDestroy blocklists, with a Gridinsoft trust score of 0/100. Current status indicates the domain has been taken offline, likely in response to security vendor detections and blocklist inclusions. However, residual risk persists due to the potential for infrastructure reuse or domain repurposing under similar impersonation schemes. Users are advised to verify domain authenticity via official channels before interacting with any verification prompts, particularly those mimicking cross-chain services. Monitoring for re-emergence under altered domains or IP addresses is recommended, given the registrar’s permissive hosting environment.