bridge[.]pulsechainapp[.]com

bridge.pulsechainapp.com is identified as a high‑risk cryptocurrency phishing site active as of July 12 2026. The domain was created on March 12 2026 and registered through Amazon Registrar, Inc. It delivers a web page titled “PulseChain Bridge – Decentralized IPFS” that returns HTTP 200. Technical analysis shows the site is hosted on Nginx with HTTP Strict Transport Security enabled and protected by a Let’s Encrypt R13 TLS certificate. Independent scoring services assign it a Scamadviser trust score of 41 out of 100 and a Gridinsoft score of 0 out of 100, both indicating malicious behavior.

Infrastructure analysis reveals that bridge.pulsechainapp.com resolves to the public IPv4 address 35.166.104.167, which belongs to the Amazon.com, Inc. network (AS16509) and is geolocated in the United States. The domain is served by four Amazon Route 53 nameservers: ns-1381.awsdns-44.org, ns-1967.awsdns-53.co.uk, ns-487.awsdns-60.com, and an additional unnamed server. The site is currently listed on one security blocklist and has been flagged by 13 of 95 security vendors on VirusTotal, reinforcing the suspicion of phishing activity targeting users of the PulseChain ecosystem.

Defenders should prioritize blocking the IPv4 address 35.166.104.167 and the fully qualified domain name bridge.pulsechainapp.com at network perimeters and endpoint security controls. Users should be warned against visiting any site that mimics the official PulseChain bridge interface, especially those presenting the same page title and using similar branding. Continuous monitoring of the associated IP range and the Amazon‑hosted nameservers is recommended, as the threat actor may pivot to adjacent infrastructure. Incident response teams should also consider sharing indicators of compromise, such as the TLS certificate fingerprint and the observed HTTP response pattern, with threat‑sharing communities to accelerate detection across the broader security ecosystem.