evotohub[.]com

The domain evotohub.com has been identified as a brand_impersonation threat targeting the Across platform. Currently, the domain is offline, but prior activity indicates malicious intent to deceive users by mimicking legitimate services associated with Across. Analysis confirms this domain was actively used for fraudulent purposes before being taken down. Infrastructure analysis reveals evotohub.com was registered through NiceNIC International Group Co., Limited and resolved to the IP address 188.114.97.3. The domain was created on February 21, 2026, an anomalous date suggesting potential backdating or misconfiguration. Security vendors flagged this domain in 3 of 95 VirusTotal scans, while Gridinsoft assigned a trust score of 0 out of 100. The domain appears on one security blocklist, and its page title, EvotoHub, further aligns with impersonation tactics. Current status indicates evotohub.com is offline, reducing immediate risk to end users. However, organizations should remain vigilant, as threat actors may re-deploy similar infrastructure. It is recommended to monitor for domains registered through the same registrar, resolving to the same IP range, or using similar naming conventions. Network administrators should block the IP 188.114.97.3 and any associated domains preemptively. Users should verify the authenticity of communications claiming to be from Across by cross-referencing official channels and reporting suspicious activity to relevant security teams.