official-trzr-bridage[.]pages[.]dev

PhishDestroy has flagged official-trzr-bridage.pages.dev as an active cryptocurrency wallet drainer site that specifically mimics the TRZR brand to trick users into authorizing malicious token transfers. The page is delivered through a Cloudflare Pages subdomain, indicating an attempt to exploit legitimate hosting infrastructure to bypass traditional blocklists. While the domain itself is newly registered and the payload has not yet been widely detected, the lure clearly targets TRZR wallet users with a spoofed “bridge” or “staking” interface designed to steal private keys or sign malicious transactions. Security researchers have observed drainer kits incorporating multi-chain bridging UIs that prompt victims for wallet connections under false pretenses—this site follows that pattern closely.

This domain was registered via Cloudflare, Inc. and resolves to IP 172.66.44.54. As of the latest scan, VirusTotal shows 5 out of 95 engines detecting the payload, and Google Safe Browsing (GSB) status remains unflagged, while the domain has not yet propagated to major threat intelligence blocklists. The domain uses a Google Trust Services SSL certificate to appear legitimate and was created recently, minimizing historical reputation data. These factors suggest a low-profile, targeted campaign likely aimed at early adopters or users seeking bridge services. The absence of detections and blocklist entries indicates the threat is still under the radar but highly active.

PhishDestroy assesses this site as a high-risk cryptocurrency drainer with active deployment. Users attempting to access official-trzr-bridage.pages.dev should immediately avoid any wallet connection prompts and report the domain to their security teams and wallet providers. Although the site remains unblocked by most browsers and AV engines, the drainer logic is operational and capable of stealing funds if wallet signatures are authorized. Until the payload is widely detected and blocked, users are advised to verify all bridge or staking URLs through official TRZR channels and use hardware wallets or transaction simulation tools before signing any requests. The risk level is currently under investigation but is expected to escalate as more victims report losses. Users are urged to treat this domain as hostile and share indicators to improve collective defense.