app[.]across[.]en-v4[.]com

PhishDestroy identifies app.across.en-v4.com as an active crypto drainer domain currently under investigation for fraudulent activity. The domain specifically impersonates Across Protocol, a legitimate cross-chain bridge service, to deceive users into connecting their wallets and signing malicious transactions that drain cryptocurrency assets. Given the domain's recent registration and lack of detection by security vendors, users are advised to treat it as a high-risk threat until further analysis is complete. This domain was flagged by 2 of 95 VirusTotal vendors, registered through NAMECHEAP INC, and resolves to IP address 35.214.208.5. The domain was created on May 12, 2026, and has already been added to 2 security blocklists. Trust scores are critically low, with MetaMask and SEAL already blocking access to the site. The SSL certificate, issued by Let's Encrypt, does not mitigate the fraudulent nature of the domain, as threat actors frequently exploit legitimate certificate providers to appear trustworthy. The current status of app.across.en-v4.com remains active and under investigation, with no known takedown action as of this report. Users should avoid interacting with this domain or any links associated with it, particularly those claiming to be related to Across Protocol. To verify the legitimacy of a link, use PhishDestroy's real-time scanning tool to check domain reputation. Additionally, users should cross-reference URLs with official Across Protocol communications and ensure they are visiting the correct domain (across.to) before engaging in any transactions. Wallet users are advised to revoke any suspicious token approvals and monitor their transaction histories for unauthorized activity.