v3ensdomains[.]com

The domain v3ensdomains.com was identified as a brand-impersonation phishing site targeting users of the brand 'across'. This scam type involves mimicking legitimate services to deceive victims into disclosing sensitive information or credentials. No crypto drainer kit was detected. The site is currently taken offline, reducing immediate risk, but prior visitors may still face follow-up attacks.

Technical analysis shows v3ensdomains.com registered through DNC Holdings, Inc. on February 21, 2026, resolving to IP address 172.67.171.243 (Cloudflare, Inc., US). Only 1 of 95 VirusTotal security vendors flagged the domain, and it appears on a single security blocklist (PhishDestroy). Google Safe Browsing did not flag it. The SSL certificate was issued by FASTPANEL / parking, and the observed page title indicated a server error ('520: Web server is returning an unknown error'). Nameservers are hosted on Cloudflare (edward.ns.cloudflare.com, fiona.ns.cloudflare.com), and Gridinsoft assigned a trust score of 0/100.

Victims of brand impersonation phishing should immediately change passwords for any accounts accessed via v3ensdomains.com, enable multi-factor authentication, and monitor for unauthorized transactions or identity fraud. Report the domain to the impersonated brand's security team (across) and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group. If financial data was exposed, contact relevant institutions to secure accounts. Always verify domain legitimacy before entering credentials.