swap-bitcoinbridge[.]app

This domain is flagged as a high-risk brand impersonation targeting Bitcoin. Registered on March 26, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED, it remains active as of July 12, 2026. The domain resolves to IP 172.67.132.67 (Cloudflare, Inc., Canada) and uses Cloudflare nameservers. SSL certificate is issued by Google Trust Services (WE1). The page title is 'Just a moment...' and HTTP returns status 403, suggesting the site may be behind a challenge gate or blocking direct access. AlienVault OTX reports one threat intelligence pulse mentioning this domain. VirusTotal shows 3 of 94 security vendors flagging it as malicious, and it appears on 1 security blocklist. Gridinsoft trust score is 0/100. PhishDestroy has blocked the domain. Defenders should treat this domain as actively serving phishing content despite the 403 response, monitor for any changes in infrastructure, and ensure no users access the site. The exact page content could not be retrieved, but the combination of low trust score, brand impersonation classification, and multi-vendor detection confirms malicious intent.