seedify-fundnft-project[.]pages[.]dev

This domain, seedify-fundnft-project.pages.dev, is actively engaged in brand_impersonation targeting Across Protocol, a cross-chain bridging platform. Analysis indicates the site mimics legitimate Across branding to deceive users into interacting with malicious smart contracts or disclosing wallet credentials. No explicit drainer kit signatures were identified, though the infrastructure aligns with common phishing tactics observed in decentralized finance (DeFi) scams. Infrastructure analysis reveals the domain was registered on December 13, 2024, through Cloudflare, Inc., and resolves to the IP address 104.21.96.1, hosted under AS13335 (Cloudflare, Inc.) in the United States. The domain is flagged by 4 out of 95 security vendors on VirusTotal, with additional detections on two security blocklists: PhishDestroy and ScamSniffer. The SSL certificate is issued by Google Trust Services (WE1), a common attribute in both legitimate and malicious Cloudflare-hosted domains. No listings were found in Google Safe Browsing at the time of analysis. The domain remains active, posing a persistent risk to users of Across Protocol and similar DeFi platforms. Response actions should include immediate blacklisting in enterprise security tools, dissemination of indicators to threat intelligence platforms, and user education on verifying official Across domains. Despite existing detections, the domain’s Cloudflare hosting and recent registration suggest potential for continued abuse, requiring ongoing monitoring for shifts in infrastructure or targeting tactics.