barrolivermateo[.]com

The domain barrolivermateo.com was a brand-impersonation phishing site targeting users of the cryptocurrency platform 'across'. It posed as a legitimate service to deceive victims into disclosing wallet credentials or transferring funds, classified as a cryptocurrency scam. No drainer kit was identified, and the site is currently taken offline, reducing immediate risk but leaving past victims exposed.

Technical indicators confirm barrolivermateo.com as malicious. At detection, 2 of 95 VirusTotal security vendors flagged the domain, including Gridinsoft (trust score 0/100) and MalwareURL. It appeared on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. The domain was registered through NameCheap, Inc. on February 21, 2026, and resolved to IP address 198.12.93.82 (US, AS36352 HostPapa). SSL certification was issued by Sectigo Public Server Authentication CA DV R36, and the observed page title was 'Barrister Oliver Matteo'. Nameservers were dns101.registrar-servers.com and dns102.registrar-servers.com.

Victims of barrolivermateo.com should immediately revoke any token approvals granted to the site and transfer remaining funds to a new, secure wallet. Monitor transaction history for unauthorized activity and report the incident to the impersonated brand 'across' for further assistance. Additionally, file reports with local cybercrime authorities and platforms like the FBI’s IC3 or the FTC to aid in tracking such scams. If credentials were entered, change passwords on all associated accounts and enable two-factor authentication where available.