app[.]across[.]to[.]en[.]v4[.]autos

This domain, app.across.to.en.v4.autos, poses a direct threat by impersonating Across Protocol, a legitimate cross-chain bridging service. The site mimics the official Across Protocol interface, using an identical page title—'Across Protocol – Transfer Assets Between Layer 2s and Mainnet'—to deceive users into believing they are interacting with a trusted platform. Such impersonation is commonly used to trick victims into connecting wallets or entering sensitive credentials, leading to unauthorized asset transfers or account takeovers. The risk is heightened by the domain’s convincing appearance and targeted focus on cryptocurrency users. Analysis indicates this domain is part of a coordinated phishing infrastructure. It was registered on May 11, 2026, through NAMECHEAP INC, a registrar frequently used in malicious campaigns. The domain is flagged by 5 out of 95 security vendors on VirusTotal, and it appears on three independent security blocklists. Infrastructure analysis reveals the use of Nginx as a web server and Google Tag Manager, which may be employed to track victim interactions or deliver additional malicious payloads. The domain resolved to the IP address 35.214.208.5 before being taken offline. If you visited app.across.to.en.v4.autos or interacted with its content, immediate action is required. Disconnect any wallets linked to the site and revoke permissions for connected applications. Monitor accounts for unauthorized transactions and consider transferring assets to a new wallet if compromise is suspected. Report the domain to relevant security teams or incident response platforms to aid in broader mitigation efforts. Users should verify domain authenticity by cross-referencing official communication channels before engaging with any service claiming to represent Across Protocol.