crosschainsupport[.]icu

PhishDestroy first observed crosschainsupport.icu on Aug 7, 2025. Stored content metadata identifies Across as the apparent target. Page analysis recorded additional brand references to Revolut. Current evidence score: 74/100 (critical).

Positive findings are stored from 4 sources: VirusTotal, Polkadot, Enkrypt, and Codeesura. VirusTotal recorded 2 detections among 95 engines: alphaMountain.ai, Forcepoint ThreatSeeker on Feb 23, 2026 at 05:43 UTC. Polkadot, Enkrypt, and Codeesura listed the hostname in the separate external-blocklist snapshot on Aug 8, 2026 at 02:20 UTC. Non-positive and contextual checks: URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC. URLScan completed without a malicious verdict on Jul 29, 2026 at 03:42 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:13 UTC; content was unavailable. Registration records for the domain list OwnRegistrar, Inc. as the registrar and Jun 22, 2025 as the creation date. At collection time, the hostname resolved to 162.55.90.94 on AS24940 (HETZNER-AS Hetzner Online GmbH, DE). The recorded endpoint location is Falkenstein, DE. The stored server header is LiteSpeed. DOM analysis on May 5, 2026 at 07:20 UTC returned 10/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance.

The content indicators and 4 positive source findings support the current Across impersonation and phishing classification. The target field identifies Across, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.