finbridge[.]art

Analysis of the domain finbridge.art indicates active participation in an investment scam operation, classified as high-risk phishing. The domain was registered on May 11, 2026, through Gname.com Pte. Ltd., and currently resolves to the IP address 172.67.214.162, hosted by Cloudflare, Inc. in Canada. Infrastructure analysis reveals the use of Cloudflare nameservers (ezra.ns.cloudflare.com and tessa.ns.cloudflare.com) and a Let's Encrypt SSL certificate (serial E7), which are common in both legitimate and malicious operations but provide no inherent trust indicators in this context. The domain is flagged on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. Gridinsoft assigns a trust score of 0/100, reinforcing its malicious classification. The page title, 'One-Stop Global Investment Platform | Forex | Commodities | Stocks | Indices | Cryptocurrencies | Gold | Oil,' explicitly aligns with the scam type identified as an investment scam, targeting individuals seeking financial trading opportunities. As of July 12, 2026, the domain remains active, returning an HTTP 200 status, which confirms its operational status. VirusTotal reports that 2 out of 92 security vendors flag this domain, though this detection rate does not fully capture its risk level due to potential delays in vendor updates. No evidence of a specific phishing kit or targeted brand beyond the investment scam classification is present in available intelligence. Defenders should treat this domain as malicious, block resolution at the DNS level, and monitor for associated indicators such as the IP address 172.67.214.162 and Cloudflare nameserver usage in related campaigns. Further analysis of the site's content or backend infrastructure is required to determine additional technical indicators or attack vectors.