trazor-bridge-intro[.]pages[.]dev

On 2026-07-29 the domain trazor-bridge-intro.pages.dev was observed actively serving malicious content classified as generic phishing. DNS resolution points to the address 188.114.96.3. The domain is hosted under Cloudflare, Inc., as indicated by the registrar record and the authoritative name servers melody.ns.cloudflare.com and ridge.ns.cloudflare.com. Cloudflare’s infrastructure provides CDN and DDoS mitigation, which can obscure the true origin of the payload.

The domain has been added to the PhishDestroy blocklist and appears on a single additional security blocklist, confirming that at least one mitigation platform is actively denying traffic. VirusTotal analysis shows that eight of ninety‑one scanned scanners raise detections, suggesting that multiple AV engines have identified malicious behavior associated with the host. The elevated risk rating and active status imply that the infrastructure remains operational.

No further intelligence such as SSL certificate details, HTTP response codes, or page title information is available at this time, leaving the exact phishing vector and targeted brand undefined. Defenders should block outbound connections to 188.114.96.3 and add trazor-bridge-intro.pages.dev to domain‑based deny lists across web, email, and DNS filtering solutions. Continuous monitoring of the domain’s DNS records and re‑evaluation of VirusTotal results is recommended to capture any changes in detection rates or hosting configuration.