tracingfundsonline[.]com

Analysis of tracingfundsonline.com indicates this domain was actively impersonating Across, a known blockchain bridging service, as part of a cryptocurrency scam operation. The domain was registered on June 21, 2025, through Namecheap, Inc., and resolved to IP address 66.29.147.98, hosted on AS22612 (Namecheap, Inc.) in the United States. Infrastructure analysis reveals the use of Cloudflare for traffic proxying, alongside WordPress, MySQL, PHP, and jQuery technologies, suggesting a templated scam site likely designed for rapid deployment. The page title 'Home - Tracingfundsonline' aligns with fraudulent fund recovery or tracing service themes, a common tactic in crypto scams targeting victims of previous fraud.

The domain appeared on one security blocklist (PhishDestroy) and was flagged by one of 95 security vendors on VirusTotal, though the specific detection context remains unverified. MX records point to eforward1.registrar-servers.com with priority 10, a configuration often used to process victim correspondence or phishing replies. SSL certification was issued by Google Trust Services (WE1), which does not inherently indicate legitimacy due to the widespread availability of free certificates. As of July 25, 2026, the domain is offline, though its prior hosting on Namecheap infrastructure and use of Cloudflare may facilitate rapid redeployment under a new domain.

Defenders should treat this domain as part of a broader crypto scam campaign targeting Across users. While the exact content of the site was not analyzed, the combination of brand impersonation, cryptocurrency scam classification, and WordPress-based infrastructure suggests a high likelihood of fraudulent fund recovery or fake investment schemes. Network-level blocking of the resolved IP (66.29.147.98) and monitoring for similar domains using Namecheap hosting and Cloudflare proxies is recommended.