bridges-trazores[.]pages[.]dev

PhishDestroy identifies bridges-trazores.pages.dev as an active credential-harvesting page deployed on Google Pages, exhibiting standard phishing behavior by impersonating legitimate login interfaces. The site resolves to IP 188.114.96.3 and leverages Cloudflare’s infrastructure for anonymity and rapid domain rotation, a common tactic among modern phishing operators. VirusTotal currently reports 0 detections out of 95 engines, indicating this threat is still under the radar of most detection systems. This domain was flagged as a generic phishing site on active reconnaissance and exhibits multiple red flags: it uses a Google Trust Services SSL certificate, which attackers frequently exploit to appear legitimate, and Cloudflare’s fast-flux IP hosting (188.114.96.3) enables rapid domain changes to evade blacklists. While precise creation timestamps are not yet available, the seed identifier 06cc77 confirms this is a tracked and evolving threat under continuous monitoring by threat intelligence teams. Recent data shows no confirmations on leading threat feeds, emphasizing the need for real-time user vigilance. Users who visited bridges-trazores.pages.dev should immediately review their browser history and close any active sessions to this site. If credentials were entered, change passwords on all related accounts immediately and enable multi-factor authentication where possible. Scan devices with updated antivirus tools and report the domain to your security team or platform provider if any suspicious activity is detected. Do not interact further with this domain and consider blocking 188.114.96.3 at the network perimeter to prevent future exposure.