bridge-terezor-logn[.]pages[.]dev

This domain, bridge-terezor-logn.pages.dev, was registered on June 10, 2026 via Cloudflare Pages. Analysis of public threat feeds shows that 11 of 91 antivirus and URL‑reputation engines on VirusTotal have marked the domain as malicious, indicating a consensus among a subset of scanners that the site is being used for phishing activity. The domain is listed on a single external blocklist, where the list operator PhishDestroy has explicitly added it to their denylist, confirming that at least one reputable anti‑phishing service observes abusive behavior originating from the host. The hosting infrastructure is supplied by Cloudflare, a content‑delivery network that also provides DNS and SSL termination for the sub‑domain.

No additional hosting details such as IP address, ASN, or geographic location are disclosed in the available intelligence, limiting the ability to correlate this site with other known infrastructures. The TLS certificate presented by the domain is a standard Cloudflare‑issued certificate covering *.pages.dev, which does not provide any brand‑specific validation and is consistent with the platform’s default configuration. Because the site is flagged by multiple vendors and appears on a phishing‑specific blocklist, defensive operators should treat the domain as high‑confidence malicious.

Recommended mitigations include adding the full host to web‑proxy and DNS filtering rules, updating endpoint URL reputation tables, and monitoring for any related Cloudflare‑Pages sub‑domains that share similar naming patterns. Continuous re‑evaluation is advised, as further evidence such as page title, observed credential‑stealing forms, or additional blocklist entries could emerge. Until more detailed content analysis is performed, the current evidence warrants an elevated risk rating and proactive blocking.