teezore-brige[.]pages[.]dev

PhishDestroy identifies teezore-brige.pages.dev as an active credential-harvesting scam designed to trick users into surrendering login credentials under the guise of a legitimate service. The domain leverages Cloudflare Pages hosting to mimic a login interface, creating a false sense of security through Google Trust Services SSL certificates. This setup is consistent with phishing campaigns targeting unsuspecting users by exploiting trusted infrastructure to bypass traditional security filters. The threat is classified as a Fake Login Portal phishing scam due to its intent to steal user credentials through deceptive authentication pages.

This domain was flagged during routine monitoring with a risk level marked as under_investigation. Intelligence shows it resolves to IP 172.66.44.70, registered through Cloudflare, Inc., and secured with a Google Trust Services SSL certificate. VirusTotal currently reports 0 detections out of 95 security engines, indicating it remains undetected by antivirus software. While the domain is hosted on Cloudflare Pages, a platform often used for legitimate purposes, the combination of a freshly registered domain and absence of blocklist entries suggests this may be a newly deployed threat. The lack of detections does not equate to safety, as phishing campaigns frequently evade detection until widespread reports trigger updates.

Users should avoid interacting with this domain entirely, as any input of credentials will be captured by attackers. To mitigate exposure, immediately block teezore-brige.pages.dev at the network level and report the domain to your security team or phishing databases like PhishDestroy. If credentials were entered, change passwords immediately and enable multi-factor authentication on all associated accounts. Monitor financial and account activity for signs of compromise, as stolen credentials may be leveraged in follow-on attacks. Exercise caution with domains hosted on reputable services like Cloudflare Pages, as threat actors increasingly abuse trusted infrastructure to evade detection.