public-trzr-en-bridge[.]typedream[.]app

public-trzr-en-bridge.typedream.app is currently active and classified as a generic phishing domain with an elevated risk rating. DNS resolution points to the address 104.21.37.85, which is hosted on a Cloudflare edge network. The domain has been observed by VirusTotal, where 14 of 91 scanned security vendors flagged it as malicious, indicating a modest but non‑trivial detection consensus. It is listed on a single public blocklist and is explicitly blocked by the PhishDestroy filtering service, confirming that at least one commercial anti‑phishing solution has incorporated it into its protection set.

No additional infrastructure details such as ASN, country of registration, SSL certificate attributes, HTTP response codes, or page title have been disclosed in the available intelligence, so the exact content served by the site remains unverified. Likewise, Safe Browsing, OTX, and other reputation services have not been referenced, leaving a gap in the broader threat‑intel picture. The limited visibility suggests the campaign may be in an early or low‑volume stage, but the presence of multiple vendor detections and an active blocklist entry demonstrates that the domain is already being leveraged for malicious credential collection. The elevated risk level assigned by the reporting system reflects the combination of active status, vendor detections, and confirmed blocklist presence, and therefore warrants proactive defensive measures.

Defenders should prioritize immediate containment actions. Network perimeter devices and proxy solutions should be configured to deny any outbound or inbound traffic to 104.21.37.85 and to the fully qualified domain name. Email security gateways must add the domain to their phishing‑URL block lists, and endpoint protection platforms should consider the 14 VirusTotal detections as a signal to quarantine any process that attempts to resolve or connect to the host.