bridge-trzr-io-eng[.]pages[.]dev

PhishDestroy identifies bridge-trzr-io-eng.pages.dev as an active crypto-drainer domain currently under investigation for generic phishing. The site is masquerading as Bridge Protocol in order to trick users into connecting wallets and signing malicious transactions that drain crypto assets. Security telemetry indicates the domain uses a Google Trust Services SSL certificate and resolves to IP 172.66.44.242 via Cloudflare, Inc., indicating modern infrastructure designed to evade detection and abuse protections. Bridge-trzr-io-eng.pages.dev exhibits the following exact technical indicators: VirusTotal detection score is 1/95 engines as of the latest scan, indicating zero antivirus coverage. The domain is registered through Cloudflare, Inc., and resolves to IP 172.66.44.242. Google Safe Browsing (GSB) has not flagged this domain at the time of analysis, and the blocklist count remains at zero, showing no prior blacklisting. The domain is hosted on Cloudflare Pages, leveraging Pages.dev for rapid deployment and evasion of traditional hosting-based blocks. Current status of bridge-trzr-io-eng.pages.dev is active and under active investigation by fraud detection teams including PhishDestroy. Immediate response actions include blocking the domain at DNS and network levels, flagging the SSL certificate for distrust where possible, and submitting samples to threat intelligence platforms for signature development. Despite these actions, the risk remains elevated due to the lack of detection coverage and the domain's use of legitimate hosting infrastructure, which allows it to rapidly reappear under different subdomains or paths. Users are advised to avoid interacting with any Bridge Protocol-related URLs unless independently verified through official sources, and to revoke any wallet approvals associated with this domain if exposed.