learn-trzr-brdge[.]pages[.]dev

PhishDestroy identifies learn-trzr-brdge.pages.dev as a credential theft phishing page using generic branding to harvest user login details. The site employs a convincing replica of a target login interface, likely targeting users expecting a legitimate bridge or portal. No crypto-drainer kit artifacts were observed in static analysis, but the page’s form submission endpoint suggests immediate credential harvesting. This domain resolves to 172.66.45.17 via Cloudflare, Inc., and is secured with a Google Trust Services SSL certificate. VirusTotal currently shows 8/95 detections and the domain remains unlisted on Google Safe Browsing. The .pages.dev subdomain under Cloudflare Pages was created recently, with no historical blocklist entries recorded to date. The threat remains active with low initial detection coverage. Users are advised to avoid interacting with the domain and report it to Cloudflare for takedown. Security teams should monitor for credential leaks and update network blocklists. Remaining risk is high due to undetected status and active lure potential.