quizzfi-proccess[.]pages[.]dev

This domain, quizzfi-proccess.pages.dev, is flagged as an active brand impersonation threat specifically targeting Across, a cross-chain token bridging protocol. The domain is designed to deceive users into disclosing sensitive credentials or transferring assets under the pretense of legitimate Across platform interactions. Analysis indicates the page title is set to 'Learn,' likely intended to mimic educational or onboarding content associated with cryptocurrency services, a common tactic in phishing campaigns to lower user vigilance. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on March 02, 2026, and currently resolves to the IP address 172.66.44.89, located within Cloudflare’s US-based autonomous system (AS13335). The SSL certificate is issued by Let’s Encrypt (serial E7), a legitimate provider often exploited by threat actors to lend an appearance of authenticity. The domain appears on three security blocklists and is actively blocked by multiple detection systems, including PhishDestroy, MetaMask, and SEAL. VirusTotal reports that 1 of 95 security vendors flags this domain as malicious, a low but non-zero detection rate that may reflect early-stage or evasive phishing infrastructure. Current status confirms the domain remains active and accessible, posing an ongoing risk to users of the Across platform. Organizations and individuals are advised to immediately block the domain and its associated IP (172.66.44.89) at the network perimeter. Endpoint protection systems should be updated to include this domain in deny lists, and users should be alerted to the impersonation threat, particularly those engaging with Across token transactions. Monitoring for similar domains using Cloudflare Pages infrastructure with 'across' or 'token' in the subdomain is recommended to preempt further phishing attempts.