mindspivottd[.]com[.]transoceanx[.]com

The domain mindspivottd.com.transoceanx.com is a phishing site engaged in brand impersonation targeting the cryptocurrency sector. It specifically mimics the brand 'across' and operates as a cryptocurrency scam, though no drainer kit was identified. The site is currently taken offline, reducing immediate risk but leaving past victims exposed.

Technical indicators confirm elevated risk: 2 of 95 VirusTotal security vendors flagged mindspivottd.com.transoceanx.com, including Gridinsoft (trust score 0/100) and Seclookup. It appears on one security blocklist (PhishDestroy) but is not flagged by Google Safe Browsing. The domain was registered on 2026-02-21 via OwnRegistrar, Inc., resolves to IP 213.165.249.109 (hosted in the Netherlands under AS22611), and uses an SSL certificate issued by R10. Nameservers are ns1.managedns1.com and ns2.managedns1.com. The observed page title, 'Copytrading with Mindspivotrade on leading, regulated broker platform | Mindspiv,' reinforces its fraudulent intent.

Victims of mindspivottd.com.transoceanx.com should immediately revoke any token approvals granted to the site and transfer remaining funds to a new, secure wallet. Monitor transaction history for unauthorized activity and report the incident to relevant platforms, including the impersonated brand 'across,' cryptocurrency exchanges, and anti-phishing organizations like PhishTank or the Anti-Phishing Working Group. Enabling two-factor authentication on all accounts and changing passwords for linked services is strongly advised.