bridgge-treezor[.]pages[.]dev

PhishDestroy identifies bridgge-treezor.pages.dev as a live fake payment portal phishing scam designed to trick users into entering banking credentials under the guise of a payment service. The domain mimics legitimate financial portals by hosting a fraudulent interface on Cloudflare Pages, resolving to IP 172.66.45.17 and leveraging a Google Trust Services SSL certificate to appear authentic. At the time of detection, this site remains undetected by 95 VirusTotal scanners, indicating a newly deployed threat still flying under the radar while actively harvesting sensitive financial data from unsuspecting victims.

This domain was flagged during real-time monitoring after being registered through Cloudflare, Inc. on an unknown date and immediately began resolving to the malicious IP 172.66.45.17. The combination of a recently issued SSL certificate from Google Trust Services and zero detections across 95 security engines suggests a well-crafted deception aimed at bypassing automated defenses. The use of a .pages.dev subdomain further exploits legitimate Cloudflare infrastructure to lend false credibility to the phishing operation.

If you visited bridgge-treezor.pages.dev, immediately check your bank statements and credit reports for unauthorized transactions. Do not enter any login credentials or payment details on this site. If you provided sensitive information, contact your bank immediately to report potential fraud and request a card freeze or replacement. Report the domain to your browser's phishing alert system and avoid clicking any links from unsolicited emails or messages related to this site. Consider running a malware scan on your device to ensure no additional threats were installed.