Is across-to.web.app safe? TrustSniffer's low-trust assessment: 25/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The domain presents only a generic "Site Not Found" hosting placeholder. The page says that no application is deployed or that a custom domain has not been fully configured. It shows no product, service, login, business identity or monetization, so its purpose and business model cannot be determined from what it displays.

Scam/Impersonation Risk

Contradictory signals are present, and they drive the cautionary posture of this assessment. Third-party threat-intelligence sources currently flag the domain, including a detection from a top-tier security vendor, and the domain is treated as blacklisted. The flags are unspecified: they do not say whether the domain hosts phishing, malware or something else. No brand impersonation, conflicting legal identities or phishing form was observed on the page itself, and no published contact address exists to assess. The placeholder gives no sign of deceptive behavior. The external flags nonetheless carry decisive weight because the domain could be repurposed at any moment, and an empty shell can be switched to arbitrary content without notice. A handful of abuse reports also exist against a network address shared with other tenants of the same provider. They are attributed to that shared infrastructure rather than to this site, so they are secondary context and not an independent accusation. Evidence:

• Homepage: a "Site Not Found" placeholder with no forms, no login, no wallet or crypto features, and no brand claims, so no impersonation was observed.
• External reputation: multiple threat-intelligence detections and a confirmed blacklist-level listing apply to the domain, with no detail on the nature of the threat.
• Network reputation: 4 abuse reports exist against a shared provider address, attributed to shared infrastructure.
• Sandbox behavior: three runs completed with stable responses and no cloaking, clipboard manipulation, hidden forms or wallet-drainer activity. Network activity was benign, with 257 external requests and none to non-whitelisted destinations.

Regulatory Verification Notes

The only page available for review is the placeholder, so no legal, terms, privacy, about or contact page exists to assess. It states no operator, no company name, no licensing status and no registration number. Real-world operator identity is therefore unverified, and no on-site claim exists that could be taken as proof of it. This is a verification gap in a site that has not been published, not a regulatory finding. No third-party broker or regulatory-database reputation match was found. Only the generic hosting-error content is attributable to the site, and it cannot support any assertion of legitimacy. Evidence:

• Homepage: no company name, licence, registration number, jurisdiction or policy documents are present.
• Transport security: the TLS certificate is issued by WR4 (DV, domain validation only) and is valid to 2026-12-22. It confirms an encrypted connection, not who operates the site.
• Hosting: served from AS54113 (Fastly, Inc., US).
• Broker reputation dataset: no match.

What to Verify Next

Before any interaction, determine who actually controls this domain and what, if anything, it is meant to serve. Ask the party that supplied the link, through an independent and previously known channel, why it points to this domain and whether it is an official property. Cross-check the claimed organisation's official website, reached independently and not through this link, to see whether it lists this exact domain. If the domain is tied to a financial or licensed service, check the licence with the relevant registry. Confirm official support and contact channels through an offline route. Evidence:

• Homepage: the content gives no operator, product or service to cross-check, so verification must rely on the source of the link.
• External reputation: current detections mean the domain's status should be re-checked before any later reliance, because the placeholder could be replaced with live content.
• Hosting posture: the placeholder indicates the domain's setup is unfinished, so its eventual purpose is unknown.

Summary Verdict

The domain carries an elevated risk posture. Confirmed external detections are decisive and outweigh the benign placeholder content, the clean sandbox behavior and the valid encrypted connection. The operator is unidentified and there is no content to establish legitimacy. This reads as a cautionary, security-forward assessment, with no evidence of active impersonation on the page itself.

Infrastructure Integrity

The domain resolves to two addresses, both CDN edge servers of Fastly, a mainstream provider, in the US. The origin server is not observable. The protective edge layer is a mitigating factor only and does not offset the external reputation concerns. Edge-only visibility also prevents independent hosting verification and could mask a rapid change of content behind the same domain.

Closing Assessment

Avoid logins, credential entry, payments or financial interactions on this domain, and do not follow links that lead to it. Limit any interaction to passive viewing until the external detections clear and the operator is independently confirmed.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2620:0:890::100 (Google LLC, Content Delivery Network), 3% confidence. The reports are attributed to shared infrastructure, not specifically to this website.