secure-axiom[.]trade

On July 25, 2026, analysis of the domain secure-axiom.trade identified it as a fraudulent site used to distribute a fake airdrop and to impersonate the brand “across”. The domain was registered through Hosting Concepts B.V. d/b/a Registrar.eu and was created on February 21, 2026. HTTP requests to the host returned a page with the title “DeFi Authentication”, suggesting an attempt to mimic decentralized‑finance login flows. The site is currently offline, but historic DNS records show it resolved to IP address 131.153.142.186, which belongs to AS20454 SECURED SERVERS LLC located in the United States.

The SSL certificate presented was identified as “R13”, indicating a low‑trust certificate; the Gridinsoft trust score for the domain is 0 out of 100. Five independent blocklists have listed the domain, specifically PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. VirusTotal scans returned 7 positive detections out of 93 security‑vendor analyses, reinforcing the malicious classification. The combined evidence from registrar data, hosting infrastructure, low trust scoring, blocklist presence, and multi‑vendor detection confirms the site’s role in a brand‑impersonation airdrop scheme.

Uncertainty remains regarding the exact content served before takedown, as the page was not captured in detail. Defenders should block the domain at DNS and proxy levels, monitor for any resurrection of the IP address or similar sub‑domains, and add the associated IP and ASN to internal watchlists. Ongoing scrutiny of the “across” brand’s official communications is advised to detect any further impersonation attempts.