dex-bridge[.]com

This domain, dex-bridge.com, is identified as a crypto drainer phishing infrastructure designed to impersonate a decentralized exchange (DEX) bridge interface. Analysis indicates the site likely targeted users of cross-chain cryptocurrency platforms, employing social engineering tactics to trick victims into connecting wallets and authorizing malicious transactions. The page title, DEX BRIDGE, directly mimics legitimate bridging services, increasing the likelihood of successful deception among users seeking token transfers between blockchains. Infrastructure analysis reveals the domain was registered on February 21, 2026, through HOSTINGER operations, UAB, and resolves to the IP address 82.29.191.101, hosted on AS47583 (Hostinger International Limited) in Great Britain. The domain appears on five security blocklists, with nine out of ninety-five security vendors flagging it on VirusTotal. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites due to its accessibility. No Google Safe Browsing (GSB) detection was explicitly noted, though the domain's presence on multiple independent blocklists suggests broad recognition of its malicious nature. As of the latest assessment, dex-bridge.com has been taken offline, likely due to hosting provider intervention or registrar enforcement actions. While the immediate threat is mitigated, the infrastructure's prior use and the domain's registration details remain a residual risk. Users who interacted with the site before its takedown may still be vulnerable to follow-up attacks, such as wallet-draining scripts or secondary phishing attempts. Organizations and individuals are advised to monitor wallet activity for unauthorized transactions, revoke any suspicious smart contract approvals, and verify the legitimacy of bridging services through official documentation or verified community channels.