bridgewallet[.]app

bridgewallet.app is a phishing domain engaged in brand impersonation, specifically targeting the brand 'across' in a cryptocurrency scam. The domain poses as a legitimate multi-card payment service under the title 'Multi-card payment service - Bridge' but is designed to deceive users into connecting their crypto wallets, potentially leading to fund theft. As of the latest assessment, the domain has been taken offline, indicating active intervention to mitigate its threat.

The technical indicators for bridgewallet.app are concerning. VirusTotal reports 1 of 95 security vendors flagging the domain, with SOCRadar among the detections. Google Safe Browsing has not flagged it, but it appears on 1 security blocklist (PhishDestroy). The domain was registered through GoDaddy.com, LLC on July 31, 2025, and resolves to IP address 208.98.35.168, located in the US under AS46844 Sharktech. No SSL certificate is issued, and the Gridinsoft trust score is 0/100, reflecting high risk. The domain uses nameservers ns1.site4now.net, ns2.site4now.net, and ns3.site4now.net.

Users who interacted with bridgewallet.app should take immediate safety steps. Since this is a cryptocurrency phishing scam, revoke any token approvals granted to the domain or associated smart contracts, and move all funds to a new, secure wallet. Change passwords for any accounts linked to the wallet and enable two-factor authentication (2FA) where possible. Monitor for unauthorized transactions or fraud. Report the domain to relevant authorities such as the FBI IC3 or local cybercrime units, and submit it to blocklists like PhishDestroy to protect others.