io-brid-ge-doc[.]pages[.]dev

Analysis indicates the domain io-brid-ge-doc.pages.dev is actively being used for credential harvesting. The domain was registered through Cloudflare, Inc., and its authoritative nameservers are odin.ns.cloudflare.com and veda.ns.cloudflare.com. DNS resolution points to the IP address 188.114.96.3, which is associated with Cloudflare's edge network. Threat intelligence platforms have flagged the domain: nine of ninety‑one VirusTotal scanners have raised alerts, and it appears on one public security blocklist.

The domain is also listed in the PhishDestroy blocklist, confirming its inclusion in active phishing mitigation feeds. No additional public indicators such as page title, SSL certificate details, or HTTP response codes are currently available, leaving the exact content and lure technique unverified. The presence of multiple security vendor detections and blocklist listings suggests a non‑trivial level of malicious activity, consistent with generic phishing campaigns that aim to capture user credentials. However, the limited visibility into the hosted page prevents attribution of a specific brand impersonated or the exact phishing vector employed.

Defenders should block DNS resolution to 188.114.96.3 for the io-brid-ge-doc.pages.dev hostname, add the domain to web‑filter and email‑gateway blocklists, and monitor network traffic for outbound connections to the IP address. Continuous re‑scanning with VirusTotal and checking for updates on blocklist feeds are recommended to capture any changes in the threat posture. Organizations should also educate users about unsolicited requests for login information, especially those that may originate from URLs hosted on Cloudflare‑provided subdomains.