treezor-bbridge[.]pages[.]dev

Analysis of the domain treezor-bbridge.pages.dev shows that it is currently active and classified with an elevated risk level. VirusTotal records indicate that 13 out of 91 security vendors have flagged the domain, demonstrating a moderate consensus of malicious intent among scanning engines. The domain appears on a single public blocklist and is explicitly blocked by the PhishDestroy service, confirming that at least one dedicated anti-phishing platform has taken protective action against it.

Registration data reveals that the domain was provisioned through Cloudflare, Inc., a widely used DNS and CDN provider, and the authoritative nameservers listed are ingrid.ns.cloudflare.com and joaquin.ns.cloudflare.com. Resolve queries point to the IP address 172.66.44.134, which is part of Cloudflare's edge network; no additional hosting details, autonomous system numbers, or geographical attribution are disclosed in the available intelligence. No public page title, SSL certificate information, HTTP response codes, or Safe Browsing verdicts have been published, so the precise content and delivery mechanisms of the suspected phishing page remain unknown.

Given the existing vendor detections, blocklist presence, and active blocking by PhishDestroy, defensive teams should add treezor-bbridge.pages.dev to network deny lists, enforce DNS filtering policies, and monitor outbound connections to the associated IP. Continuous re‑evaluation is advised as further telemetry becomes available, especially any observed payloads, credential‑stealing forms, or redirects that could clarify the phishing campaign’s objectives.