io-bridge-terzor-en[.]pages[.]dev

PhishDestroy identifies io-bridge-terzor-en.pages.dev as a live phishing site currently under investigation for impersonating legitimate Terzor services. The domain leverages Cloudflare’s Pages.dev platform to host a spoofed interface, likely aiming to harvest credentials or payment details from unsuspecting users. Security researchers have flagged the domain as active and flagged it with a status of 'under_investigation,' indicating active monitoring but no definitive classification yet. This domain was flagged by PhishDestroy on e0d96a seed data. This domain resolves to IP 188.114.96.3 and operates under a Google Trust Services SSL certificate, which may lend false credibility to the site. VirusTotal currently shows 0 detections out of 95 engines, meaning mainstream antivirus tools have not yet flagged it, making this a stealthy threat. The domain was registered through Cloudflare, Inc., utilizing their Pages.dev service—a common tactic among phishers to rapidly deploy and discard malicious pages. These details suggest the operators are leveraging reputable infrastructure to evade detection while targeting unsuspecting visitors. If you’ve visited io-bridge-terzor-en.pages.dev, avoid entering any personal or financial information. Check your accounts for unusual activity, especially if you provided credentials. Run a malware scan on your device and consider changing passwords for sensitive accounts. Report the domain to your browser’s phishing warning system or to PhishDestroy to help protect others. Stay vigilant—new phishing sites emerge daily, and legitimate services rarely use Pages.dev domains for official communications.