sasinax[.]com

The domain sasinax.com is a confirmed phishing site engaged in brand impersonation targeting the cryptocurrency platform 'across'. This site posed an elevated risk by mimicking the legitimate 'across' brand to deceive users into disclosing sensitive information or transferring funds under false pretenses. As of the latest verification, sasinax.com has been taken offline, though it previously operated as a social media phishing scam without an associated crypto drainer kit.

Technical analysis reveals that sasinax.com was flagged by 3 of 95 security vendors on VirusTotal, including Fortinet, Netcraft, and SOCRadar. The domain was registered on 2025-02-23 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolved to the IP address 172.67.166.130, hosted on Cloudflare's infrastructure (AS13335). It appeared on one security blocklist (PhishDestroy) and used an SSL certificate issued by GoDaddy.com, Inc. The observed page title was 'Cryptocurrency trading platform', and the site employed technologies such as Nginx and OpenResty. The Gridinsoft trust score for sasinax.com was 0/100, further indicating its malicious nature.

Users who interacted with sasinax.com should immediately change any passwords or credentials entered on the site, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized transactions or fraudulent activity. If cryptocurrency was involved, revoke any token approvals granted to suspicious contracts and consider transferring funds to a new wallet. Report the domain to relevant platforms, including Google Safe Browsing, PhishTank, or local cybersecurity authorities, to aid in broader mitigation efforts.