bridge-trezo-io-en[.]pages[.]dev

The domain bridge-trezo-io-en.pages.dev is currently classified as a high‑risk generic phishing site. Registration data shows the domain was provisioned through Cloudflare, Inc., and it resolves to the IPv4 address 172.66.45.7. The authoritative nameservers listed are kenia.ns.cloudflare.com and noel.ns.cloudflare.com, both owned by Cloudflare, indicating the hosting infrastructure is completely cloud‑based. Threat intelligence from Google Safe Browsing labels the domain as a social engineering vector, confirming its use in credential‑stealing campaigns.

VirusTotal analysis reports that 12 of 91 security vendors have flagged the domain, providing independent corroboration of malicious intent. The domain is actively blocked by PhishDestroy and appears on one external security blocklist, demonstrating that at least one third‑party defensive platform has already taken mitigation action. No additional information about the web content, SSL certificate details, or HTTP response codes is available in the current intelligence set, leaving the exact phishing page layout and targeted brand undefined.

Defenders should prioritize immediate blocking of bridge-trezo-io-en.pages.dev at perimeter firewalls, DNS resolvers, and endpoint web filters. Continuous monitoring of the associated IP address (172.66.45.7) and the Cloudflare nameservers is advised, as changes may signal further campaign activity. Insertion of the domain into internal blocklists and sharing of the indicator set with threat‑intel sharing platforms will help reduce exposure across the organization.