bridge-and-swap[.]app

The domain bridge-and-swap.app is currently flagged as a high-risk generic phishing site. Analysis indicates that the domain was registered through Namecheap Inc. on April 26, 2026, and it resolves to an IP address 35.214.144.255, which is located in the Netherlands and hosted by Google Cloud (europe-west4). Despite the domain being relatively new, it has already appeared on three security blocklists, including PhishDestroy, MetaMask, and SEAL. The Gridinsoft trust score for this domain is 0/100, indicating a complete lack of trust in its operations. The HTTP status code returned when attempting to access the site is 403 Forbidden, suggesting that the site may be actively preventing access or is under maintenance. However, the page title 'Under construction - Awesome site in the making!' could be a ruse to mask the true nature of the domain. The SSL certificate for the domain is issued by Let's Encrypt, a common practice for phishing sites to appear more legitimate. Given the high risk level and the presence on multiple blocklists, defenders should treat any traffic to this domain with extreme caution and consider blocking it at the network level to prevent potential phishing attacks. Further monitoring and analysis are recommended to identify any specific targets or techniques employed by the threat actors behind this domain.