webauthshq[.]com

This domain, webauthshq.com, is flagged as a high-risk brand impersonation threat specifically targeting users of the Across Protocol, a decentralized bridging platform. Analysis indicates the site operates as a crypto drainer, designed to deceive victims into connecting wallets under the guise of legitimate Web3 services. The page title, 'Decentralized Dapps - We are unifying Web3 by providing best-in-class, self-custodial, and multichain support,' directly mimics Across Protocol’s branding to exploit user trust in cross-chain functionalities. Infrastructure analysis reveals multiple technical indicators of malicious intent. The domain was registered on February 21, 2026, through HOSTINGER operations, UAB, a registrar frequently associated with fraudulent activity. It resolves to the IP address 82.29.191.88, which has no SSL certificate, further reducing its legitimacy. Detection metrics show 12 out of 95 security vendors on VirusTotal flagging the domain as malicious, while it appears on four independent security blocklists. Additionally, AlienVault OTX lists the domain in one threat intelligence pulse, confirming its association with active phishing campaigns. Mitigation against this crypto drainer requires immediate action from both users and security teams. Users who may have interacted with the domain should revoke any connected wallet permissions and transfer assets to a new, secure wallet. Security teams should block the domain and its resolving IP (82.29.191.88) at the network level, while monitoring for similar impersonation attempts targeting Across Protocol or other Web3 platforms. Given the high-risk nature of this threat, organizations should also educate users on verifying domain authenticity and avoiding unsolicited Web3 service prompts.