bridge-ice[.]xyz

The domain bridge-ice.xyz was registered on March 27, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently active. Infrastructure analysis shows the domain resolves to IP address 188.114.97.3, which belongs to a CDN provider operating in Canada. The domain uses nameservers kehlani.ns.cloudflare.com and toby.ns.cloudflare.com, indicating reliance on a widely used DNS service. An SSL certificate issued by a recognized authority (WE1) is present, but the site returns an HTTP 403 status, suggesting the front‑end is intentionally inaccessible or protected. Threat intelligence sources have recorded the domain in eight separate pulses, and it is listed on one security blocklist; it has also been blocked by a known phishing‑blocking service. Six of ninety‑four security vendors have flagged the domain as malicious, and a proprietary trust scoring system assigned a score of 0 out of 100, reflecting a high likelihood of abuse. While the exact phishing payload or targeted brand is not disclosed, the combination of recent registration, low trust score, multiple vendor detections, and inclusion in threat feeds indicates a high‑risk phishing operation. Defenders should block the domain at perimeter and DNS layers, monitor for any outbound connections to the associated IP, and incorporate the domain into threat‑intel feeds used by endpoint and email security solutions. Continuous re‑evaluation is advised, as the site may evolve or become more active.