addyfxsmart[.]com

This domain is flagged as a high-risk brand impersonation threat specifically targeting Across, a known blockchain bridging protocol. The site, titled 'Addy Fx Smart - Home,' is designed to deceive users into believing it is an official or affiliated platform, potentially leading to unauthorized transactions, credential theft, or financial fraud. Analysis indicates this is not a generic phishing attempt but a targeted impersonation scheme aimed at exploiting trust in the Across brand. Infrastructure analysis reveals the domain was registered on February 23, 2025, through Cosmotown, Inc., and currently resolves to the IP address 163.61.188.222, hosted on AS153568 (NEW DHAKA HARDWARE) in the United States. The domain lacks an SSL certificate, increasing the risk of man-in-the-middle attacks or data interception. Security vendor detection is minimal but notable, with 1 out of 95 vendors on VirusTotal flagging the domain as malicious. The domain appears on one security blocklist, and no legitimate association with Across or its official infrastructure has been identified. Mitigation steps for this specific threat type include immediate blacklisting of the domain and its associated IP (163.61.188.222) at the network perimeter. Organizations should update endpoint protection rules to block access to addyfxsmart.com and monitor for any attempts to resolve or connect to this domain. Users should be educated to verify domain authenticity before interacting with any platform claiming affiliation with Across, particularly those using unofficial naming conventions (e.g., 'Addy Fx Smart'). Network logs should be reviewed for prior connections to this domain, and any credentials or transactions associated with it should be considered compromised. Given the active status of the domain, proactive monitoring for related infrastructure (e.g., newly registered domains with similar naming patterns) is recommended.