app[.]satoshiprotocol[.]org

This domain, app.satoshiprotocol.org, is actively flagged as a high-risk brand impersonation targeting the Across protocol, a known cross-chain bridge service. Infrastructure analysis reveals the domain was registered on February 21, 2024, through Squarespace Domains LLC, and currently resolves to IP address 76.76.21.164. The hosting environment uses Vercel, a common platform for both legitimate and malicious deployments, and is secured with an SSL certificate issued by Google Trust Services. The page title, 'River,' does not align with the expected branding of Across, further suggesting misrepresentation. Security vendors have detected this domain on two blocklists, and independent trust scoring systems (Gridinsoft and Scamadviser) assign it the lowest possible trust rating (0/100 and 1/100, respectively). While twelve of ninety-five security vendors on VirusTotal flag the domain as malicious, this detection rate alone does not confirm the exact nature of the threat. The domain remains operational as of July 12, 2026, and is actively blocked by at least two security tools. Defenders should treat this domain as a confirmed impersonation attempt targeting Across users. The combination of low trust scores, blocklist presence, and brand mismatch indicates a likely phishing or scam operation. Network-level blocking of the domain and IP address is recommended, along with monitoring for related infrastructure (e.g., Vercel-hosted subdomains or similar naming patterns). Further analysis of the site’s content and behavior is necessary to determine if it functions as a crypto drainer, credential harvester, or another form of fraud. No additional brand-specific artifacts or scam categorization details are currently available.