bridge-ordeez[.]io

The domain bridge-ordeez.io was registered on 21 February 2026 and is currently taken offline. Its TLS certificate is issued by Cloudflare TLS Issuing ECC CA 1, indicating the site was served through Cloudflare’s CDN. DNS resolution points to the IP address 104.21.32.1, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site’s page title, as captured in prior intelligence, reads “ORDEEZ - Bitcoin Liquidity Protocol”, while the threat profile lists the brand target as Discord and classifies the operation as a social‑media phishing campaign that impersonates Discord.

The domain has a Gridinsoft trust score of 0 out of 100, reflecting a complete lack of trust. Reputation data shows the domain appears on four public blocklists – PhishDestroy, Polkadot, Enkrypt, and Codeesura – confirming that multiple security vendors have flagged it as malicious. VirusTotal analysis recorded a single positive detection out of ninety‑five scanning engines, providing additional confirmation of malicious intent. No further technical artefacts such as malware payloads or command‑and‑control infrastructure have been disclosed.

Because the site is no longer reachable, active probing is not possible, and the exact content of the landing page beyond the title remains unverified. Defenders should continue to block the domain at network perimeter and DNS layers, add the associated IP address to deny lists, and monitor for any resurgence of the domain or similar Cloudflare‑hosted infrastructure that matches the observed characteristics. Ongoing threat‑intel feeds should be consulted for updates, and any internal alerts that reference the listed blocklists or the single VirusTotal positive should be investigated as potential indicators of compromise.