Back Kucoin

Domain taken over via social engineering attack; frontend and API services offline

Kucoin • November 11, 2026

Odaily Planet Daily report: Across officially posted on X that at approximately 18:45 UTC, the attacker gained control of the Across domain through a social engineering attack targeting the domain registrar Namecheap. The team received an alert and took action within 15 minutes of the attack; SEAL911 subsequently flagged across.to as a phishing site, and Cloudflare assisted in removing its DNS records. The across.to domain is now fully offline, and the phishing site is no longer accessible.

Across stated that during the brief window before Cloudflare fully blocked the malicious website, some users who visited across.to may have been affected; however, third-party integrated services and API users were not impacted. Since the domain registrar Namecheap has not yet responded, the team is currently unable to fully secure the domain. As a result, Across' frontend and API services will remain suspended until the security issue is resolved. The team will further investigate this domain takeover incident and release a post-incident analysis report once more information is available.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Across Domain Hijacked via Social Engineering Attack On November 11, 2026, Across reported that its official website domain was hijacked through a social engineering attack targeting Namecheap, the domain registrar. The attack occurred at approximately 02:45 Beijing time, and Across took action within 15 minutes upon receiving an alert. SEAL911 flagged the compromised domain as a phishing site, and Cloudflare removed its DNS records, rendering the phishing page inaccessible. Users who visited the site before it was fully blocked may have been affected, although API and third-party integration users were not impacted. Across has committed to compensating affected users and will keep its frontend and API services offline until domain security is assured. The company is investigating the incident and plans to release a post-incident review. As of now, there has been no response from Namecheap regarding the incident. 2 sources 39

Extracted Entities

Domain taken over via social engineering attack; frontend and API services offline

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Domains (1)

MITRE ATT&CK (1)

Tools (1)