proearners[.]live

This domain is flagged as a high-risk brand impersonation threat targeting Across, a known decentralized protocol. Analysis indicates the domain is designed to deceive users by presenting itself as an official Across platform, likely for credential harvesting or fraudulent transactions. The risk level is elevated due to the domain's active impersonation tactics and its association with malicious infrastructure. Infrastructure analysis reveals the domain was registered through Atak Domain Bilgi Teknolojileri A.Ş. and resolves to the IP address 86.107.77.165, hosted under AS216395 (HostBet Cloud Technologies Private Limited) in Germany. VirusTotal detection shows 13 out of 95 security vendors flagging the domain as malicious, while it also appears on one security blocklist. The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious domains. Google Safe Browsing explicitly classifies this domain as phishing, and it has since been taken offline, though historical records confirm its prior malicious activity. Mitigation steps for this threat type include immediate blocking of the domain and its resolving IP (86.107.77.165) at the network perimeter. Organizations should update endpoint protection rules to detect and prevent access to brand impersonation domains, particularly those mimicking decentralized finance (DeFi) platforms. Security teams are advised to monitor for indicators of compromise (IoCs) such as unusual login attempts or transaction requests originating from interactions with this domain. User awareness training should emphasize verifying domain authenticity and avoiding unsolicited links, especially for financial or protocol-related services.