# PhishDestroy domain threat record: io-bridge.io Content language: English Canonical HTML report: https://phishdestroy.io/domain/io-bridge.io/ Machine-readable companion: https://phishdestroy.io/domain/io-bridge.io/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-19 01:34:49 UTC - Last availability or vendor check: 2026-10-22 10:29:15 UTC - Stored record updated: 2026-10-22 16:07:29 UTC - VirusTotal detections in the stored snapshot: 4/92 - Independent public blocklist matches in the stored snapshot: 2 - Matching public blocklists: MetaMask, SEAL - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: signal ## Stored infrastructure - Observed IP address: 13.226.244.40 - Registrar in stored WHOIS data: Megazone Corp., dba HOSTING.KR - Last stored HTTP status: 200 - Registration date (registry RDAP, io-bridge.io): 2026-10-15 10:06:41 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a151cb-561d-75dc-9360-abb1dbfdbf63/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/io-bridge.io - Certificate Transparency search: https://crt.sh/?q=%25.io-bridge.io - Web Archive lookup: https://web.archive.org/web/*/https://io-bridge.io/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview io-bridge.io is a domain that PhishDestroy first observed on 2026-10-19. The site is currently unreachable but remains on the PhishDestroy blocklist. The domain mimics a cryptocurrency bridge service, which is a common lure for wallet drainers and phishing kits. The page title and content could not be verified at the time of last check. How the scam works Cryptocurrency bridge services allow users to swap tokens across different networks. Scam sites like io-bridge.io exploit this trust by presenting a convincing interface that prompts users to connect their wallets or enter seed phrases. Once connected, the site can drain tokens directly or harvest credentials for later theft. Users risk losing funds and exposing sensitive wallet data if they interact with the page. Evidence On 2026-10-19, VirusTotal flagged io-bridge.io with 4 detections out of 92 engines, including Forcepoint ThreatSeeker, Fortinet, Gridinsoft, and Kaspersky. The domain is also listed on the PhishDestroy, MetaMask, and SEAL blocklists. OTX pulses recorded 4 community reports linking the domain to suspicious activity. Infrastructure The domain was registered on 2026-10-15 with Megazone Corp., dba HOSTING.KR. It is hosted on a server with IP address 13.226.244.40. What to do If you visited io-bridge.io, do not connect your wallet or enter any credentials. Disconnect any connected wallets immediately and revoke any suspicious approvals in your wallet settings. Clear your browser cache and cookies, then scan for malware. Report the domain to your wallet provider and local cybercrime units. For defenders, block the domain and IP at the network level and monitor for related infrastructure. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a151cb-561d-75dc-9360-abb1dbfdbf63/ VirusTotal report: https://www.virustotal.com/gui/domain/io-bridge.io Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=io-bridge.io Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-19 02:10:51 UTC ## Stored page captures - Primary capture: https://i.ibb.co/1YnTsSK0/226c83620881.png Captured: 2026-10-19 01:34:49 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a151cb-561d-75dc-9360-abb1dbfdbf63.png Captured: 2026-10-19 01:34:49 UTC Source report: https://urlscan.io/result/01a151cb-561d-75dc-9360-abb1dbfdbf63/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/21a9f45b-1314-49f2-910a-8f3443fd7a0e.png Captured: 2026-10-19 01:36:45 UTC Source report: https://radar.cloudflare.com/scan/21a9f45b-1314-49f2-910a-8f3443fd7a0e SHA-256: fdd16c5aec3b089d9bc8470ad9b1ab23fa2129b58aa5e1ff83c1808005674f0a - URLScan · 2026-10-19: https://screenshots.phishdestroy.io/us/01a151c6-6fc1-708e-89ad-acc1e6e5bcf2.png Captured: 2026-10-19 01:28:48 UTC Source report: https://urlscan.io/result/01a151c6-6fc1-708e-89ad-acc1e6e5bcf2/ SHA-256: a82dbf2f07db672bfa5591ed3227285599803448d4790292910d5e42530f59f5 - URLScan · 2026-10-19: https://screenshots.phishdestroy.io/us/01a151d4-6dcf-769b-8eca-e19159703bac.png Captured: 2026-10-19 01:44:04 UTC Source report: https://urlscan.io/result/01a151d4-6dcf-769b-8eca-e19159703bac/ SHA-256: a82dbf2f07db672bfa5591ed3227285599803448d4790292910d5e42530f59f5 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-20T17:42:56Z", "uuid": "01a151cb-561d-75dc-9360-abb1dbfdbf63", "scanned_at": "2026-10-19T01:34:10Z", "final_url": "https://io-bridge.io/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://io-bridge.io/", "from": "http://io-bridge.io/", "status": 307 } ], "ip": "13.226.244.57", "ptr": "server-13-226-244-57.fra56.r.cloudfront.net", "domains": [ "fonts.gstatic.com", "fonts.googleapis.com" ], "ips": [ "142.251.110.94", "142.251.20.95", "13.226.244.57" ], "asns": [ "15169", "16509" ], "countries": [ "US" ], "doc_hash": "66a3608fc5473343f714f85be2d76c5d6f713842d116759e3d5c209fde07db50", "storage_keys": [ "iob-lang" ], "tls": { "san": [ "io-bridge.io", "www.io-bridge.io" ], "cipher": "AES_128_GCM", "issuer": "Amazon RSA 2048 M04", "subject": "io-bridge.io", "protocol": "TLS 1.3", "valid_to": "2027-04-30T23:59:59Z", "valid_from": "2026-10-15T00:00:00Z" }, "domain_age_days": 3, "apex_age_days": 3, "tls_age_days": 4, "tls_valid_days": 197, "requests": 22, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 97, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "AmazonS3", "content-type": "text/html", "strict-transport-security": "max-age=31536000", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } }, "cf": { "v": 1, "fetched_at": "2026-10-20T17:56:00Z", "uuid": "21a9f45b-1314-49f2-910a-8f3443fd7a0e", "scanned_at": "2026-10-19T01:36:45Z", "final_url": "https://io-bridge.io/", "status": 200, "history": [ { "url": "https://io-bridge.io/", "status": 200 } ], "dom_hash": "1f393c81e98b9038408a8aee78b7776f6c894f800e922dbda83dfc569e8578fc", "doc_hash": "66a3608fc5473343f714f85be2d76c5d6f713842d116759e3d5c209fde07db50", "domain_risks": [ "Newly Seen Domains", "Security Risks" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "io-bridge.io", "type": "A", "value": "52.85.129.63" }, { "name": "io-bridge.io", "type": "A", "value": "52.85.129.89" }, { "name": "io-bridge.io", "type": "A", "value": "52.85.129.101" }, { "name": "io-bridge.io", "type": "A", "value": "52.85.129.105" }, { "name": "io-bridge.io", "type": "AAAA", "value": "2600:9000:2004:800:6:fd7a:c040:93a1" }, { "name": "io-bridge.io", "type": "AAAA", "value": "2600:9000:2004:7400:6:fd7a:c040:93a1" }, { "name": "io-bridge.io", "type": "AAAA", "value": "2600:9000:2004:d800:6:fd7a:c040:93a1" }, { "name": "io-bridge.io", "type": "AAAA", "value": "2600:9000:2004:7200:6:fd7a:c040:93a1" }, { "name": "io-bridge.io", "type": "AAAA", "value": "2600:9000:2004:4000:6:fd7a:c040:93a1" }, { "name": "io-bridge.io", "type": "AAAA", "value": "2600:9000:2004:b200:6:fd7a:c040:93a1" }, { "name": "io-bridge.io", "type": "AAAA", "value": "2600:9000:2004:6a00:6:fd7a:c040:93a1" }, { "name": "io-bridge.io", "type": "AAAA", "value": "2600:9000:2004:8a00:6:fd7a:c040:93a1" } ], "dnssec_valid": false, "ip": "52.85.129.63", "whois": { "registrar": "Megazone Corp., dba HOSTING.KR", "created": "2026-10-15T10:06:41Z", "updated": "2026-10-15T11:48:03Z", "expires": "2027-10-15T10:06:41Z", "nameservers": [ "lara.ns.cloudflare.com", "maciej.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-20T18:07:08Z", "analysis_at": "2026-10-19T12:20:16Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 1, "suspicious": 1, "undetected": 35 }, "detections": { "SOCRadar": "suspicious", "alphaMountain.ai": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "registrar": "Megazone Corp., dba HOSTING.KR", "created": "2026-10-15T10:06:41Z", "expires": "2027-10-15T10:06:41Z", "updated": "2026-10-15T12:08:30Z", "first_seen": "2026-10-15T13:11:49Z", "dns": [ { "ttl": 300, "type": "MX", "value": "route1.mx.cloudflare.net", "priority": 35 }, { "ttl": 60, "type": "AAAA", "value": "2600:9000:288b:1e00:6:fd7a:c040:93a1" }, { "ttl": 300, "type": "TXT", "value": "brevo-code:3634ac6bd5dcb62920186196e7449c6d" }, { "ttl": 60, "type": "A", "value": "3.170.185.2" }, { "ttl": 60, "type": "AAAA", "value": "2600:9000:288b:be00:6:fd7a:c040:93a1" }, { "ttl": 60, "type": "AAAA", "value": "2600:9000:288b:d800:6:fd7a:c040:93a1" }, { "ttl": 300, "type": "MX", "value": "route2.mx.cloudflare.net", "priority": 70 }, { "ttl": 60, "type": "AAAA", "value": "2600:9000:288b:4800:6:fd7a:c040:93a1" }, { "ttl": 21600, "type": "NS", "value": "maciej.ns.cloudflare.com" }, { "ttl": 60, "type": "AAAA", "value": "2600:9000:288b:ee00:6:fd7a:c040:93a1" }, { "ttl": 60, "type": "AAAA", "value": "2600:9000:288b:1600:6:fd7a:c040:93a1" }, { "ttl": 300, "type": "MX", "value": "route3.mx.cloudflare.net", "priority": 16 }, { "ttl": 300, "type": "TXT", "value": "v=spf1 include:_spf.mx.cloudflare.net ~all" }, { "ttl": 60, "type": "A", "value": "3.170.185.20" }, { "ttl": 60, "type": "A", "value": "3.170.185.16" }, { "ttl": 60, "type": "AAAA", "value": "2600:9000:288b:8000:6:fd7a:c040:93a1" }, { "ttl": 300, "type": "TXT", "value": "google-site-verification=Jxqp4SMhrYrcbRtwkrsrhKb6s-WMtKL4HyzZ4g-IMOs" }, { "ttl": 21600, "type": "NS", "value": "lara.ns.cloudflare.com" }, { "ttl": 60, "type": "AAAA", "value": "2600:9000:288b:2a00:6:fd7a:c040:93a1" }, { "ttl": 60, "type": "A", "value": "3.170.185.25" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "lara.ns.cloudflare.com" } ], "dns_at": "2026-10-19T12:22:08Z", "jarm": "29d29d00029d29d00041d41d00041db78309d03c04b7072bacbf1ce396279b", "cert": { "san": [ "io-bridge.io", "www.io-bridge.io" ], "issuer": "Amazon / Amazon RSA 2048 M04", "serial": "470d41b7ed6967fb07fdf06ae1e114d", "sha256": "2636d99de818ecaea39644c69781ef904b01b2a9b882eb81f6dda9bd30775d48", "subject": "io-bridge.io", "valid_to": "2027-04-30T23:59:59Z", "valid_from": "2026-10-15T00:00:00Z" }, "whois": { "registrar": "Megazone Corp., dba HOSTING.KR", "registrar_iana_id": "1489", "registrar_url": "http://www.hosting.kr", "created": "2026-10-15T10:06:41Z", "updated": "2026-10-15T12:08:30Z", "expires": "2027-10-15T10:06:41Z", "status": [ "addPeriod", "clientTransferProhibited", "clientUpdateProhibited" ], "nameservers": [ "lara.ns.cloudflare.com", "maciej.ns.cloudflare.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited", "client update prohibited", "add period" ], "events": { "expiration": "2027-10-15T10:06:41Z", "last changed": "2026-10-15T12:08:30Z", "registration": "2026-10-15T10:06:41Z", "last update of RDAP database": "2026-10-15T13:11:48Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T00:58:20Z", "mail_config": { "mx": [ "route3.mx.cloudflare.net", "route1.mx.cloudflare.net", "route2.mx.cloudflare.net" ], "spf": "v=spf1 include:_spf.mx.cloudflare.net ~all", "dane": true, "dkim": [ "brevo1", "brevo2" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 1 }, "caa_records": { "domain": "io-bridge.io" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-19T01:49:39Z", "first": "2026-10-19T01:49:39Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 14909 }, "robots_txt": { "agents": [ "*" ], "present": true, "llms_txt": true, "sitemaps": [ "https://io-bridge.io/sitemap.xml" ] }, "sitemap": { "present": true, "url_count": 1 }, "social_tags": { "ogUrl": "https://io-bridge.io/", "title": "IO Bridge", "ogType": "website", "ogImage": "https://io-bridge.io/assets/og-image.png", "ogTitle": "IO Bridge — 센서에서 화면까지, 한 팀이 만듭니다", "ogSiteName": "IO Bridge", "themeColor": "#0B4683", "description": "IO Bridge — 회로·PCB, 임베디드 펌웨어, 계측·DAQ와 그 데이터를 쓰는 소프트웨어까지 한 팀이 만듭니다", "twitterCard": "summary_large_image", "canonicalUrl": "https://io-bridge.io/", "ogDescription": "회로·PCB, 임베디드 펌웨어, 계측·DAQ와 그 데이터를 쓰는 소프트웨어까지 개발합니다." }, "trackers": { "requests": 21, "trackers": [ { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 16 } ] }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 44, "tls": 29, "wait": 795, "connect": 21, "download": 1 }, "response_ms": 890 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_128_GCM_SHA256", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 41144, "co2_grams": 0.0015, "cleaner_than": 41 }, "dns_server": { "ns": [ { "ip": "108.162.195.42", "host": "maciej.ns.cloudflare.com" }, { "ip": "173.245.58.128", "host": "lara.ns.cloudflare.com" } ], "zone": "io-bridge.io" }, "location": { "ip": "2600:9000:20c3:f800:6:fd7a:c040:93a1", "asn": "16509", "org": "Amazon.com, Inc.", "city": "Vienna", "country": "AT" }, "ssl": { "issuer": "Amazon / Amazon RSA 2048 M04", "subject": "io-bridge.io" }, "dns": { "A": [ "99.84.91.13", "99.84.91.35", "99.84.91.71", "99.84.91.56" ], "MX": [ "{\"exchange\": \"route3.mx.cloudflare.net\", \"priority\": 16}", "{\"exchange\": \"route1.mx.cloudflare.net\", \"priority\": 35}", "{\"exchange\": \"route2.mx.cloudflare.net\", \"priority\": 70}" ], "NS": [ "maciej.ns.cloudflare.com", "lara.ns.cloudflare.com" ], "SOA": "{\"nsname\": \"lara.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417780581, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}", "TXT": [ "google-site-verification=Jxqp4SMhrYrcbRtwkrsrhKb6s-WMtKL4HyzZ4g-IMOs", "v=spf1 include:_spf.mx.cloudflare.net ~all", "brevo-code:3634ac6bd5dcb62920186196e7449c6d" ], "AAAA": [ "2600:9000:20c3:f800:6:fd7a:c040:93a1", "2600:9000:20c3:7400:6:fd7a:c040:93a1", "2600:9000:20c3:d000:6:fd7a:c040:93a1", "2600:9000:20c3:7e00:6:fd7a:c040:93a1", "2600:9000:20c3:2e00:6:fd7a:c040:93a1", "2600:9000:20c3:d600:6:fd7a:c040:93a1", "2600:9000:20c3:8c00:6:fd7a:c040:93a1", "2600:9000:20c3:fa00:6:fd7a:c040:93a1" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "strict-origin-when-cross-origin", "xXSSProtection": "1; mode=block", "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": false, "strictTransportPolicy": "max-age=31536000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "2600:9000:20c3:fa00:6:fd7a:c040:93a1", "family": 6 }, "redirects": { "chain": [ "https://io-bridge.io" ] }, "tech_stack": { "technologies": [ "Amazon Web Services", "Google Font API", "HSTS", "Amazon S3", "Amazon CloudFront", "AWS Certificate Manager", "Open Graph", "HTTP/3" ] }, "linked_pages": { "internal_count": 5 }, "whois": { "registrar": "Megazone Corp., dba HOSTING.KR", "created": "2026-10-15T10:06:41Z", "updated": "2026-10-20T10:07:11Z", "expires": "2027-10-15T10:06:41Z", "status": [ "clientTransferProhibited https://icann.org/epp", "clientUpdateProhibited https://icann.org/epp" ], "nameservers": [ "lara.ns.cloudflare.com", "maciej.ns.cloudflare.com" ] }, "headers": { "headers": { "server": "AmazonS3", "content-type": "text/html", "strict-transport-security": "max-age=31536000", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "strict-origin-when-cross-origin" } } } } ```