rectify[.]swiftexpresspoint[.]com

This domain, rectify.swiftexpresspoint.com, is identified as a high-risk brand impersonation threat designed to deceive users of the Across protocol. Analysis of the page title, "Blockchain Rectification - We are help to help you resolve your crypto related issues," indicates a fraudulent crypto support scam, likely intended to trick victims into disclosing wallet credentials or transferring funds under false pretenses. The domain impersonates Across, a legitimate cross-chain bridging platform, and employs social engineering tactics to exploit users seeking assistance with crypto-related issues.

Technical indicators confirm the malicious nature of this infrastructure. The domain was registered on September 02, 2025, through OwnRegistrar, Inc., and resolves to the IP address 23.239.110.100, hosted on AS53850 (GorillaServers, Inc.) in the United States. VirusTotal detection metrics show 20 out of 95 security vendors flagging the domain as malicious. It appears on three independent security blocklists and is actively blocked by at least three major threat intelligence feeds. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and malicious domains, providing no inherent trust signal.

As of the latest assessment, rectify.swiftexpresspoint.com has been taken offline, reducing immediate exposure. However, residual risk persists due to the domain's recent registration and the potential for infrastructure reuse. Organizations and users are advised to block the domain and associated IP at the network level, monitor for related phishing campaigns, and verify all crypto support requests through official Across communication channels. Continuous vigilance is recommended, as threat actors frequently repurpose or re-register similar domains to resume operations.