begin-bridge-8uj[.]pages[.]dev
Verifica phishing e sicurezza per begin-bridge-8uj.pages.dev
“Trezor Bridge | Secure Connection for Trezor Devices”
begin-bridge-8uj.pages.dev — Raggiungibile · accesso limitato (HTTP 403). Simulazione del marchio: Trezor; Tipo di truffa: Brand Impersonation. Riepilogo delle prove: VirusTotal 3/94 (ADMINUSLabs, Fortinet, Kaspersky); URLScan malicious verdict; PhishDestroy score 65/100. Registrar: Cloudflare.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
PhishDestroy identifies begin-bridge-8uj.pages.dev as a domain currently under investigation for potential involvement in cryptocurrency drainer operations. The threat type is specifically a crypto drainer phishing campaign, designed to trick users into connecting their crypto wallets and unknowingly approve malicious transactions that drain funds. Given the active status and low detection rates, this domain poses a significant risk to unsuspecting cryptocurrency users, particularly those engaging with decentralized applications or platforms associated with cloud-based hosting services like Cloudflare Pages. This domain resolves to IP address 172.66.44.111 and operates under a Cloudflare, Inc. registrar, utilizing Google Trust Services for its SSL certificate. VirusTotal currently flags this domain with a 3 out of 95 detection score, indicating it has not yet been widely recognized by security vendors as malicious. The domain is hosted on Cloudflare Pages, a legitimate service, which may be leveraged to obfuscate its true intent. The risk level remains classified as under_investigation, but the absence of detections and active status warrant heightened scrutiny. No additional blocklists or reputation scores were provided in the available intelligence at this time. Analysts should treat begin-bridge-8uj.pages.dev as a high-risk crypto drainer domain and prioritize mitigation efforts accordingly. Users are advised to avoid interacting with this domain, particularly any prompts to connect crypto wallets or approve transactions. Security teams should monitor network traffic for connections to IP 172.66.44.111 and inspect SSL certificates associated with Google Trust Services for anomalous domains. Implementing network-level blocking for this domain and IP address is recommended until further intelligence confirms its legitimacy or malicious nature. Additionally, users should enable wallet transaction approval alerts and verify the authenticity of any platform prompting for crypto wallet connections through out-of-band communication channels.
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Informazioni forensi
Tecnologie · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of begin-bridge-8uj.pages.dev · checked Mar 25, 2026
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo