bridgers[.]i-nn[.]io

On July 24, 2026, the domain bridgers.i-nn.io was examined as part of an elevated‑risk brand impersonation investigation. The domain was created on March 12, 2025 and is registered through NameCheap, Inc. Its authoritative nameservers are dns1.namecheaphosting.com and dns2.namecheaphosting.com, indicating the use of Namecheap's hosting services. DNS resolution points to IP address 66.29.153.159, which belongs to AS22612 (Namecheap, Inc.) and is geolocated in the United States. No SSL certificate is present for the host, meaning communications are unencrypted and the site cannot establish trusted HTTPS connections.

Gridinsoft assigns a trust score of 0 out of 100, reflecting a lack of confidence in the domain's legitimacy. The page title retrieved from the site is "Bridgers," but no further content has been captured because the site is currently taken offline. The domain appears on one security blocklist and is actively blocked by the PhishDestroy service, confirming that defensive products have flagged it as malicious. VirusTotal analysis shows that 2 of 95 security vendors have reported the domain as malicious, providing independent corroboration of its abusive nature.

The observed indicators collectively point to a wallet/seed phishing campaign that likely attempts to harvest cryptocurrency recovery phrases or private keys. Uncertainty remains regarding the exact phishing payload, as the site is offline and no HTTP response body is available for deeper inspection. Defenders should immediately add the domain and its resolving IP address to network deny lists, enforce DNS blocking for the associated nameservers, and monitor for any new subdomains or infrastructure re‑use by the same registrar. Continuous telemetry from threat intelligence platforms should be consulted for any resurgence of activity, and organizations should educate users about the risk of unsolicited requests for wallet seed phrases, especially those referencing the "Bridgers" title.