user[.]bridgeinvestmarket[.]com
“System login Bridge Invest-market”
user.bridgeinvestmarket.com — 未验证. 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 11/91 (ADMINUSLabs, ChainPatrol, BitDefender, Chong Lua Dao, CRDF); PhishDestroy score 83/100. 注册商: Atak Domain Bilgi Tekn….
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain user.bridgeinvestmarket.com was registered on April 29, 2024 through Atak Domain Bilgi Teknolojileri A.S. It resolves to the Cloudflare IP address 188.114.96.3, which is advertised as belonging to AS13335 Cloudflare, Inc. The authoritative nameservers are kaiser.ns.cloudflare.com and olivia.ns.cloudflare.com, indicating the use of Cloudflare’s DNS and DDoS mitigation services. The site is currently live and classified as active.
A page fetched from the host returns an HTTP 302 redirect and presents the title “System login Bridge Invest-market”. The TLS certificate is issued by Google Trust Services under the WE1 identifier, confirming that HTTPS is terminated at Cloudflare’s edge. Detected front‑end components include Bootstrap, jQuery, reCAPTCHA and the HTTP/3 protocol, all typical of modern phishing kits that aim to emulate legitimate login portals.
Reputation scoring shows a Gridinsoft trust score of 0 out of 100, and three of ninety‑five VirusTotal scanners have flagged the domain as malicious, triggering inclusion on at least one public blocklist. The domain is also listed in the PhishDestroy blocklist. Its scam type is identified as cryptocurrency, and the risk rating is high. These signals collectively indicate a purposeful credential‑harvesting operation rather than an accidental misconfiguration.
Defenders should block user.bridgeinvestmarket.com at the DNS and firewall layers, and consider denying traffic to its resolved IP 188.114.96.3, keeping in mind that Cloudflare may host other legitimate services on the same address block. Continuous monitoring of TLS certificate changes and HTTP status codes can help detect future repurposing. Adding the domain to internal blocklists and sharing the indicators with threat‑intel platforms will reduce exposure to potential credential theft.
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
Registration: bridgeinvestmarket.com
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For the registrable domain bridgeinvestmarket.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
所用技术 · 5 identified
Popular CSS framework for responsive, mobile-first web development.
Google's bot-challenge service. On phishing sites, used to appear legitimate and filter out automated scanners.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of user.bridgeinvestmarket.com · checked Mar 2, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。