across[.]to[.]bridge-and-swap[.]to

across.to.bridge-and-swap.to poses as Across Protocol to trick users into connecting crypto wallets and draining assets. The site mimics the official Across interface, prompting users to 'Transfer Assets Between Layer 2s and Mainnet' while secretly authorizing malicious transactions. This domain leverages the trust in Across Protocol to deceive visitors into taking irreversible actions under false pretenses. PhishDestroy identifies this threat through multiple technical indicators. The domain was registered on May 01, 2026, through NAMECHEAP INC, resolving to IP 35.214.208.5. As of current scans, VirusTotal shows 0 detections out of 95 engines, indicating it remains undetected by most antivirus solutions. The site also holds a valid Let's Encrypt SSL certificate, adding a veneer of legitimacy. Despite its recent creation, the domain’s page title and visual design closely mirror Across Protocol’s official branding, suggesting a deliberate effort to deceive. If you visited across.to.bridge-and-swap.to, disconnect your wallet immediately and revoke any unauthorized permissions via tools like revoke.cash. Do not interact further with the site or enter any credentials. Report the domain to Across Protocol’s official channels and your organization’s security team. Monitor wallet transactions for suspicious activity and consider rotating private keys if necessary. Stay vigilant against similar impersonation attempts and verify URLs before taking any action.