assest-brdge-en-learn[.]pages[.]dev

PhishDestroy identifies the active phishing domain assest-brdge-en-learn.pages.dev as a crypto drainer kit currently under investigation. This page masquerades as a legitimate Bridge Learning portal to trick users into connecting crypto wallets and authorizing fraudulent token approvals. The threat actor leverages Cloudflare Pages hosting to evade takedowns, while the domain itself resolves to IP 188.114.97.3 and is secured with a Google Trust Services SSL certificate to appear authentic. This domain was flagged on seed 9030c2 with zero detections out of 95 VirusTotal engines, indicating a fresh and still-evolving campaign. It was registered through Cloudflare, Inc., which complicates traditional abuse mitigation. The page remains live and accessible, posing an immediate risk to cryptocurrency users who may confuse it for an official learning or asset-bridging platform. As of today, the domain remains active with no known blocklist entries and no detections on VirusTotal. Users are strongly advised to avoid interacting with any links or content associated with assest-brdge-en-learn.pages.dev. Security teams should block the domain at the network level and monitor for related infrastructure. While the risk level is currently under investigation, the lack of AV coverage and use of reputable hosting suggest this drainer kit may soon escalate into a widespread threat.