get-trze-bridg-auth[.]pages[.]dev

The domain get-trze-bridg-auth.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and is currently marked as taken offline. DNS resolution points to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The site presents a page title of "Suspected phishing site | Cloudflare" and returns an HTTP 403 status code, indicating access denial for generic requests. TLS termination is provided by a Google Trust Services certificate identified as WE1, and the hosting environment advertises HSTS and HTTP/3 support, confirming modern security features typically associated with Cloudflare‑protected services.

Reputation metrics are extremely low: Gridinsoft assigns a trust score of 0 out of 100, while Scamadviser rates the domain at 1 out of 100. The domain appears on a single security blocklist and has been actively blocked by PhishDestroy. VirusTotal analysis shows that 14 of 93 scanned security vendors flagged the domain, reinforcing the suspicion that it is being used for credential phishing. No additional intelligence such as malware families, command‑and‑control infrastructure, or victim targeting has been disclosed.

Given the combination of a recent registration date, low trust scores, a Google‑issued SSL certificate, Cloudflare infrastructure, and multiple vendor detections, the evidence points to a deliberate credential‑phishing operation. Defenders should continue to block the domain at perimeter defenses, monitor DNS queries for the associated nameservers (dimitris.ns.cloudflare.com and lorna.ns.cloudflare.com), and consider adding the IP 188.114.96.3 to deny‑list rules. Ongoing threat‑intel feeds should be consulted for any emerging indicators, and any internal logs that reference this domain should be investigated for potential compromise attempts.