bluexvest[.]com

This domain, bluexvest.com, is actively engaged in brand impersonation targeting users of the Across cross-chain protocol. Analysis indicates the infrastructure is designed to mimic legitimate Across wallet interfaces, likely to harvest cryptocurrency wallet credentials or private keys. The domain presents itself under the page title 'Bluexvest,' which bears no relation to official Across branding, suggesting an attempt to deceive users into believing they are interacting with a trusted service.

Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on September 02, 2025, through Ultahost, Inc., and resolves to IP address 51.75.150.177, hosted on OVH SAS infrastructure in Germany (AS16276). As of the latest scan, 6 out of 95 security vendors on VirusTotal have flagged bluexvest.com as malicious. The domain currently appears on one security blocklist, though it lacks SSL encryption, further reducing its legitimacy. These technical indicators, combined with the absence of any verifiable association with Across, confirm the domain's role in fraudulent activity.

Users who have visited bluexvest.com or interacted with its content are advised to take immediate action. Cease all engagement with the domain and revoke any wallet permissions granted during the interaction. Conduct a full security audit of any connected devices, including malware scans and review of browser extensions. If cryptocurrency transactions were initiated, monitor wallet activity closely and consider migrating assets to a new wallet if unauthorized access is suspected. Report the domain to relevant security teams and cryptocurrency platforms to aid in broader threat mitigation efforts.