tresor-bridge-welts[.]pages[.]dev

tresor-bridge-welts.pages.dev is a recently launched phishing site posing as a cryptocurrency wallet drainer, designed to trick users into connecting their wallets and stealing funds. The domain mimics legitimate crypto services, likely targeting users searching for wallet bridges or transaction tools. Security researchers identified this threat via behavioral analysis and domain reputation monitoring, revealing its active infrastructure despite low detection rates. PhishDestroy flagged this domain after VirusTotal scans returned 0 detections out of 95 engines, indicating it evades most antivirus tools. The site operates under Cloudflare’s infrastructure (registered via Cloudflare, Inc.) and uses a Google Trust Services SSL certificate for deceptive legitimacy. The infrastructure resolves to IP 188.114.96.3, a known hosting range associated with malicious domains. This domain was created recently, suggesting an opportunistic campaign to exploit users during high-volume crypto transactions or airdrops. If you visited tresor-bridge-welts.pages.dev, immediately disconnect your wallet and revoke any unauthorized permissions via your wallet’s security settings. Do not interact with wallet connection prompts or enter seed phrases. Report the domain to PhishDestroy for further analysis and warn others in crypto communities. Always verify URLs via PhishDestroy’s database before using crypto services.