app-bridgers[.]cfd

On 24 July 2026 the domain app-bridgers.cfd was observed as an offline crypto‑scam site. The domain was registered through Web Commerce Communications Limited and its creation date is 30 May 2025. DNS resolution points to 104.21.5.7, an address owned by AS13335 Cloudflare, Inc. located in the United States. The authoritative nameservers are johnny.ns.cloudflare.com and sharon.ns.cloudflare.com, confirming that the infrastructure is hosted behind Cloudflare’s edge network. No TLS certificate was presented when the site was reachable, indicating that the service operated without HTTPS protection.

The page title returned by the now‑inactive site was “Bridgers”, which matches the limited branding information supplied. Static analysis by VirusTotal recorded detections from 2 of 95 scanning engines, providing independent confirmation that the domain is associated with malicious activity. The domain is listed on at least one public phishing blocklist and has been actively blocked by the PhishDestroy service, demonstrating that external mitigation platforms have identified it as a threat. No evidence of a valid SSL certificate, safe‑browsing status, or Open Threat Exchange (OTX) entries was found in the supplied data. Given the combination of a recent registration, Cloudflare‑based hosting, lack of encryption, and the presence of detections on multiple security vendors, defenders should treat app-bridgers.cfd as a confirmed crypto‑scam infrastructure.

Network defenders should add the IPv4 address 104.21.5.7 to outbound deny lists and ensure that any DNS resolvers employed by the organization block queries to the domain. Email gateways should be configured to reject messages containing URLs that resolve to this domain. Because the site is currently offline, monitoring for re‑appearance is advisable; threat‑intel feeds that reference the domain, the associated IP, or the registrar should be correlated to detect any future activation.