allbridgeapp[.]live

This domain, allbridgeapp.live, is flagged as a brand_impersonation phishing site targeting the Across decentralized finance protocol. Analysis of the page title, 'Allbridge - Bridging the Decentralized Finance World,' indicates an attempt to mimic legitimate Allbridge services while redirecting users to fraudulent interactions, likely involving credential harvesting or token theft. No drainer kit signatures were identified in initial scans, but the domain aligns with known tactics used in DeFi phishing campaigns to exploit user trust in cross-chain bridging platforms.

Technical indicators confirm elevated risk: the domain resolves to IP 188.114.96.3 (AS13335 Cloudflare, Inc.), lacks an SSL certificate, and is detected by 10 out of 95 security vendors on VirusTotal. Registrar details are not publicly disclosed, but passive DNS analysis suggests recent creation, aligning with phishing domain lifecycle patterns. The domain appears on one security blocklist and was previously blocked by PhishDestroy. Google Safe Browsing status is not explicitly listed, but the absence of SSL and Cloudflare hosting are consistent with low-effort phishing infrastructure.

As of the latest verification, allbridgeapp.live has been taken offline, likely following abuse reports or registrar intervention. However, residual risk persists due to potential reuse of the domain or migration of the phishing campaign to new infrastructure. Users who interacted with the site should revoke any connected wallet permissions, monitor for unauthorized transactions, and verify contract interactions using blockchain explorers. Organizations should update blocklists to include this domain and its associated IP to prevent future access attempts.