spankmasweb[.]netlify[.]app

This domain operates as a fraudulent cryptocurrency recovery service, specifically impersonating Across protocol support channels. The site displays a page titled 'Blockchain Rectification - We are help to help you resolve your crypto related issues' and claims to offer wallet resolution services, a common tactic used to trick victims into disclosing private keys or transferring funds to attacker-controlled addresses. The impersonation targets users experiencing legitimate transaction issues, exploiting their distress to bypass normal security precautions. Analysis indicates this domain was registered through Netlify on March 06, 2026, with infrastructure analysis revealing multiple high-confidence threat indicators. The domain is flagged by 21 out of 95 security vendors on VirusTotal, appears on two security blocklists (including PhishDestroy and ScamSniffer), and is explicitly labeled as phishing by Google Safe Browsing. The site resolves to IP address 35.157.26.135 located in Germany under Amazon.com, Inc. AS16509, and uses a DigiCert-issued SSL certificate, creating a false appearance of legitimacy. Users who visited this domain should immediately cease all interaction and avoid entering any credentials or wallet information. If any sensitive data was shared, affected parties should transfer remaining assets to a new wallet using a secure device, revoke all connected dApp permissions, and monitor transaction histories for unauthorized activity. The domain remains active as of analysis, requiring continued vigilance from cryptocurrency users and platform administrators. No legitimate support service will ever request private keys, seed phrases, or direct fund transfers for issue resolution.