claim-antix[.]io

This domain is flagged for elevated-risk brand impersonation targeting the across protocol, a decentralized cross-chain platform. Analysis indicates the infrastructure is designed to deceive users into believing they are interacting with official across services, potentially facilitating unauthorized access to wallets or sensitive credentials under the guise of a promotional campaign titled 'Digital humans are here. Are you in?'. Infrastructure analysis reveals the domain claim-antix.io was registered on October 30, 2025, through NiceNIC International Group Co., Limited. It resolves to IP address 94.183.185.140, hosted on AS56971 Cloud infrastructure located in the United States. The domain appears on two security blocklists and is blocked by PhishDestroy and ScamSniffer. A Let's Encrypt SSL certificate (serial E8) was issued for the domain, a common tactic to mimic legitimacy. VirusTotal reports 15 out of 95 security vendors flagging the domain as malicious, with detection labels including phishing, brand impersonation, and potential crypto-related fraud. Mitigation steps for this threat type include immediate blacklisting of the domain and associated IP across enterprise security controls. Network administrators should verify DNS logs for resolutions to 94.183.185.140 and audit endpoint activity for connections to claim-antix.io. Users should be alerted to the specific page title 'Digital humans are here. Are you in?' as a red flag for across impersonation. Organizations leveraging across should implement domain monitoring to detect lookalike registrations and enforce strict origin validation for all cross-chain interactions. If credentials or wallet access were provided, immediate revocation and migration to new, secure addresses are recommended.