across[.]to-protocol-api-v3[.]com

PhishDestroy identifies across.to-protocol-api-v3.com as a confirmed brand impersonation site, posing a significant threat to users who may unknowingly provide sensitive information, thinking they are interacting with the legitimate Across Protocol service.

This domain was flagged due to its suspicious behavior, with 6 out of 95 security vendors on VirusTotal detecting it as malicious, and it was created on February 21, 2026, which is a relatively recent creation, indicating a potential ongoing campaign, and the fact that it resolves to the IP address 172.67.206.14 and has a WE1 SSL certificate, further supports the notion that this is a dedicated effort to deceive users.

If a user visited this site, they should immediately take action to protect themselves, such as changing passwords, monitoring their accounts for any suspicious activity, and being cautious of any emails or notifications that may be attempting to trick them into revealing sensitive information, as this domain has been taken offline, but the damage may have already been done, and it is crucial to be proactive in securing personal data, especially considering that across.to-protocol-api-v3.com appears on 2 security blocklists, emphasizing the need for vigilance.