syncverse-chain[.]online

Analysis indicates that syncverse-chain.online was registered on 10 October 2025 through NameCheap, Inc. and is hosted on the IP address 66.29.137.56, which belongs to AS22612 (Namecheap). The server resides in the United States and uses the default Namecheap hosting nameservers dns1.namecheaphosting.com and dns2.namecheaphosting.com. No TLS certificate is presented, meaning connections are unencrypted. The only observable page element is the title “Blockchain”, providing no direct evidence of brand impersonation beyond the declared target “across”.

The domain is classified as a “Fake Airdrop” scam, suggesting an attempt to lure victims with a counterfeit token distribution tied to the across brand. Threat intelligence shows that four of ninety‑five VirusTotal scanners flagged the domain, and it is currently listed on four external blocklists. Additional protective services—including PhishDestroy, Polkadot, Enkrypt, and Codeesura—have actively blocked the domain. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment.

The site is presently offline, limiting real‑time verification of payloads or redirects. Uncertainty remains regarding the exact content served before takedown, as no screenshots or HTTP response bodies are available. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the same host or similar sub‑domains, and advise users to avoid unsolicited airdrop offers referencing across. Ongoing observation of the hosting ASN and registration details is recommended to detect potential re‑use of the infrastructure for future campaigns.