rockyrectifier[.]xyz

The domain rockyrectifier.xyz is a confirmed phishing site engaged in brand impersonation targeting the 'across' platform. It operated as an airdrop scam and wallet-connect phishing page, designed to deceive users into connecting wallets or entering sensitive credentials under false pretenses. No crypto drainer kit was identified, but the site posed an elevated risk due to its fraudulent representation of a legitimate brand. As of analysis, rockyrectifier.xyz has been taken offline.

Technical indicators confirm the malicious nature of rockyrectifier.xyz. The domain was flagged by 2 of 95 VirusTotal security vendors, including Forcepoint ThreatSeeker and SOCRadar, and appeared on 4 security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. Registered through HOSTINGER operations, UAB on November 05, 2025, it resolved to the IP address 212.1.212.27, hosted by AS47583 Hostinger International Limited in the US. No SSL certificate was present, and the observed page title was 'Rectification'. Nameservers were ns1.dns-parking.com and ns2.dns-parking.com. Gridinsoft assigned a trust score of 0/100, further indicating its fraudulent intent.

Users who interacted with rockyrectifier.xyz should immediately revoke any token approvals granted to unknown contracts and consider transferring funds to a new wallet to prevent unauthorized access. If credentials were entered, change passwords for the affected accounts and enable two-factor authentication (2FA) where available. Monitor accounts for suspicious activity and report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand's security team to aid in takedown efforts.