bridge-trzrus-eng[.]pages[.]dev

PhishDestroy identifies bridge-trzrus-eng.pages.dev as an active fake login portal impersonating a legitimate service. The domain leverages Cloudflare Pages for hosting, presenting a fraudulent interface designed to harvest user credentials. Current threat intelligence confirms this domain remains unblocked by major security vendors, with investigations ongoing to determine the full scope of impersonation.

This domain was flagged by 8 of 95 VirusTotal vendors as of the latest scan, indicating undetected malicious activity. Registered through Cloudflare, Inc., it resolves to IP 172.66.47.70 and operates under a Google Trust Services SSL certificate for added legitimacy. The domain’s recent creation and lack of blocklist presence suggest an emerging threat, with trust scores remaining low due to its phishing nature.

Bridge-trzrus-eng.pages.dev remains active and poses a high risk to unsuspecting users. Security researchers recommend blocking the domain at the network level and reporting it to relevant authorities. Users encountering this domain should avoid entering any credentials and verify the legitimacy of the service through official channels. Immediate action is advised due to the unresolved investigation status.