online-bridge-io[.]netlify[.]app

Analysis conducted on July 23, 2026 indicates that the domain online-bridge-io.netlify.app is currently offline and returns an HTTP 404 status with the page title “Site not found”. The host resolves to the IP address 18.208.88.157, which belongs to AS14618 operated by Amazon.com, Inc., and is located in the United States. DNS resolution uses the nsone.net name servers dns1.p04.nsone.net and dns2.p04.nsone.net. The site is served through Netlify’s static‑site platform and presents an HSTS header, confirming the use of HTTPS. The TLS certificate presented is a DigiCert Global G2 RSA SHA‑256 certificate issued in 2020 and signed by DigiCert Inc., consistent with Netlify’s default provisioning.

Multiple security aggregators have flagged the domain. VirusTotal reports that 15 of 95 scanned vendors label the host as malicious, and the domain is listed on one external blocklist. Commercial phishing‑mitigation service PhishDestroy also blocks the domain. The threat classification in the provided intelligence is “Crypto Scam”, indicating that the site was likely used to solicit cryptocurrency payments or private keys, although the exact payload or lure cannot be confirmed because the site no longer serves content.

Given the offline status, active mitigation is limited to ensuring that any residual references to the domain are blocked at the network perimeter. Defenders should add the domain and its associated IP address (18.208.88.157) to firewall deny lists, update DNS filtering policies to include the nsone.net name servers, and monitor for re‑registration or similar Netlify‑hosted subdomains that may reuse the same infrastructure. Continuous observation of VirusTotal and other reputation feeds is advised to detect any future reappearance. Until the domain is taken down permanently, the elevated risk rating warrants precautionary blocking in email gateways and web proxies.