cetbridging[.]com

This domain is flagged as an active phishing site designed to harvest cryptocurrency wallet credentials. Analysis indicates it employs social engineering tactics to trick users into entering sensitive information, such as private keys or recovery phrases, under the guise of a legitimate bridging service. The site’s infrastructure is structured to closely resemble authentic crypto platforms, increasing the likelihood of successful deception among unsuspecting victims. Infrastructure analysis reveals that cetbridging.com was registered on April 9, 2026, through Tucows Domains Inc., a registrar commonly associated with both legitimate and malicious domains. The domain resolves to the IP address 188.114.97.3 and is secured with a Let's Encrypt SSL certificate, a tactic frequently used by threat actors to create a false sense of security. Detection metrics further confirm its malicious nature, with 17 out of 95 security vendors on VirusTotal flagging the domain as malicious. Additionally, the domain appears on four independent security blocklists, reinforcing its classification as a high-risk threat. Users who have visited cetbridging.com or interacted with its content should take immediate action to mitigate potential risks. First, disconnect any connected wallets from the site and revoke any permissions granted through decentralized applications. Next, scan the device for malware using updated security software to ensure no additional payloads were delivered. If credentials or private keys were entered, transfer assets to a new, secure wallet and monitor all linked accounts for unauthorized transactions. Finally, report the domain to relevant security communities to aid in broader threat disruption efforts.