bridg-terezrr[.]pages[.]dev

PhishDestroy identifies bridg-terezrr.pages.dev as an active cryptocurrency drainer campaign distributing a fake login portal designed to harvest wallet credentials and seed phrases. This domain leverages Cloudflare Pages to host a convincing replica of a legitimate service, tricking users into entering sensitive information that is immediately transmitted to attacker-controlled wallets. The infrastructure is configured to proxy traffic through Cloudflare’s global network, adding layers of obfuscation to evade detection by traditional security tools. The domain was registered using Cloudflare, Inc. as the registrar and resolves to IP 172.66.46.247 with an SSL certificate issued by Google Trust Services, increasing its appearance of legitimacy. This domain exhibits high-risk characteristics with zero detections on VirusTotal as of the latest scan, indicating it has not yet been widely flagged by antivirus engines. The domain is newly registered and currently unlisted on most threat intelligence blocklists, allowing it to operate under the radar. Given its low detection profile and active hosting environment, it poses an immediate threat to users who may interact with it under the assumption of legitimacy. The absence of prior blocking and the use of reputable infrastructure providers like Cloudflare and Google Trust Services make this campaign particularly dangerous, as it bypasses common security heuristics that rely on domain reputation or certificate reputation. If you have visited bridg-terezrr.pages.dev and entered any cryptocurrency wallet credentials, seed phrases, or private keys, immediately revoke access to any connected wallets and transfer remaining assets to a newly generated wallet. Disconnect any active sessions associated with the entered credentials and enable multi-factor authentication where available. Report the incident to PhishDestroy for further investigation and consider revoking any API keys or permissions granted to the domain. Use a hardware wallet for future transactions and avoid entering sensitive information on any unverified web portal. Stay vigilant and continue monitoring your wallet activity for any unauthorized transactions.