rconnectingpro[.]ramosdelfina814[.]workers[.]dev

This domain, rconnectingpro.ramosdelfina814.workers.dev, is identified as a brand impersonation threat targeting the Across protocol, a cross-chain bridging platform. The site presents itself as a cryptocurrency support portal, explicitly stating in its page title, 'Blockchain- We are help to help you resolve your crypto related issues,' a common tactic used to deceive users into engaging with fraudulent support services. Analysis indicates this is not a legitimate support channel but rather a scam designed to exploit users seeking assistance with crypto-related issues, potentially leading to unauthorized access to wallets or financial loss. The domain is currently offline, but prior activity warrants further scrutiny. Infrastructure analysis reveals the domain was flagged by 12 of 95 security vendors on VirusTotal, indicating a moderate level of detection and concern within the security community. It is hosted on Cloudflare’s network (AS13335) and resolves to the IP address 172.67.140.148, a geolocation associated with the United States. The domain was registered through Cloudflare, Inc., and created on February 21, 2026, though this date may reflect an error or misconfiguration, as it predates the current year. It appears on two security blocklists, and its SSL certificate is issued by Google Trust Services (WE1), a common certificate authority for both legitimate and malicious domains. The site was also blocked by at least two independent security tools, further corroborating its malicious classification. The domain’s current status is offline, reducing immediate risk to users. However, given the elevated detection rate and its prior use in brand impersonation, organizations and individuals should remain vigilant. It is recommended to monitor for any reactivation of this domain or similar variants targeting the Across protocol. Network administrators should consider adding the domain and its associated IP (172.67.140.148) to blocklists as a precautionary measure. Users who may have interacted with this domain should review their cryptocurrency wallets for unauthorized transactions and report any suspicious activity to relevant security teams. Proactive education on recognizing crypto support scams and verifying official support channels is advised to mitigate future risks.