across[.]to-api-v3-app[.]com

The domain across.to-api-v3-app.com is a phishing site engaged in brand impersonation, specifically targeting Across Protocol users. It poses a threat by attempting to deceive victims into believing they are interacting with the legitimate Across Protocol platform, potentially leading to credential theft or unauthorized transactions. No crypto drainer kit was identified. The site is currently taken offline, but prior activity suggests it was operational for malicious purposes.

Technical indicators show that across.to-api-v3-app.com has 0 of 95 VirusTotal vendors flagging it as malicious, and Google Safe Browsing has not marked it as unsafe. The domain appears on 1 security blocklist (PhishDestroy) and was created on 2026-02-21 07:01:08. It resolves to the IP address 188.114.96.3, hosted on Cloudflare's infrastructure (AS13335) in the US. The SSL certificate is issued by WE1, and the observed page title was 'to-api-v3-app.com | 521: Web server is down'. Registrar information is not available.

Users who may have interacted with across.to-api-v3-app.com should take immediate safety steps. If credentials were entered, change passwords for Across Protocol and any other accounts using the same credentials, and enable two-factor authentication (2FA). Monitor accounts for unauthorized activity and report any suspicious transactions. To report the phishing domain, submit it to platforms like Google Safe Browsing, PhishTank, or the Across Protocol security team for further investigation.