bridge-en[.]zapier[.]app

PhishDestroy identifies bridge-en.zapier.app as an active credential-harvesting domain operating under an elevated phishing threat classification. This site masquerades as a legitimate Zapier interface to trick users into surrendering login details, exposing accounts to unauthorized access and potential data exfiltration.

This domain was flagged by 5 of 95 VirusTotal security vendors, possesses a Let’s Encrypt SSL certificate, and resolves to IP 64.239.123.129. The infrastructure is hosted on a shared platform commonly abused for phishing campaigns, with the domain designed to mimic legitimate Zapier login pages. The presence of a publicly trusted SSL certificate increases the risk of successful deception, as users may overlook security warnings due to the padlock icon in the browser address bar.

To mitigate exposure, users should immediately block bridge-en.zapier.app at the network and browser levels. Avoid accessing the site or entering any credentials, as the page is engineered to capture and transmit user input to attacker-controlled servers. Report the domain to your security team or via platforms such as Google Safe Browsing or PhishTank. If credentials were entered, rotate passwords immediately on all associated accounts and enable multi-factor authentication (MFA) where available. Conduct a full account audit for signs of unauthorized access or unusual activity.