bridge-relay[.]com[.]pendelfi[.]com

This domain, bridge-relay.com.pendelfi.com, is flagged as a wallet seed phishing site targeting the 'across' brand, based on available infrastructure and detection data. Analysis indicates the domain was created on February 21, 2026, and resolved to IP address 45.134.10.34, hosted under AS400529 (Infraly, LLC) in the United States. The domain is currently offline, with a recorded page title of 'Relay,' though no further content analysis is available. Two of 93 security vendors on VirusTotal flagged the domain at the time of assessment, and it appears on one security blocklist, including PhishDestroy.

The SSL certificate is classified as R13, a low-trust indicator often associated with automated or short-lived phishing domains. Gridinsoft assigns a trust score of 0/100, reinforcing the elevated risk classification. While the domain is no longer active, defenders should treat any prior resolutions or DNS queries linked to this domain as high-risk indicators.

Historical logs, proxy traffic, or endpoint telemetry referencing this domain should be reviewed for potential compromise, particularly in environments where 'across'-related services or cryptocurrency wallets are used. No evidence of a broader phishing kit or additional infrastructure is present in the available data, limiting further attribution. Defenders are advised to monitor for re-registration or re-emergence under similar subdomain patterns, as this infrastructure aligns with known wallet seed phishing tactics.