reflectt-blockchain[.]xyz

On July 24, 2026, reflectt-blockchain.xyz was identified as a brand impersonation domain targeting the 'across' brand. The domain was created on February 21, 2026, and is currently offline, which may indicate that the threat has been mitigated or the campaign has ended. However, the offline status does not guarantee safety, as the domain could be reactivated for further malicious activities. Reflectt-blockchain.xyz was flagged by 3 out of 93 security vendors on VirusTotal, indicating a low but notable level of suspicion. The domain appears on four security blocklists, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, which suggests that it has been associated with phishing activities.

The Gridinsoft trust score for this domain is 0/100, reflecting a complete lack of trustworthiness. The domain resolves to the IP address 92.113.16.97, which is located in Germany and is hosted by AS47583 Hostinger International Limited. The SSL certificate for this domain is marked as R11, but the significance of this identifier is unclear without further context. The page title found is 'Rectification,' which does not provide specific insights into the content or nature of the site.

The exact content of the site has not been fully analyzed, but the domain's association with a fake airdrop scam is evident. Defenders should remain vigilant and monitor this domain for any signs of reactivation. Additionally, users should be cautious of any communication or links related to 'across' that direct them to this domain or similar URLs. Organizational security policies should reflect the elevated risk level of this domain, and automated systems should be configured to block access to it to prevent potential exposure to the fake airdrop scam.