avc-bridge[.]pages[.]dev

The domain avc-bridge.pages.dev was created on 21 January 2025 and is hosted on Cloudflare Pages, as indicated by the registrar information. DNS resolution points to the IP address 188.114.97.3, which belongs to Cloudflare’s edge network and is commonly used for short‑lived or dynamically generated sites. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, providing concrete evidence that it is being used for malicious purposes.

VirusTotal records show that the site has been scanned by 91 anti‑malware vendors, none of which reported a detection at the time of analysis; however, the absence of detections does not constitute a safety guarantee. No additional intelligence such as Safe Browsing alerts, OTX mentions, or SSL certificate anomalies is available. The limited data set leaves uncertainty around the specific payload or credential‑harvesting mechanisms employed, as well as the exact target brand or page content.

Defenders should treat the domain as hostile and incorporate it into URL filtering rules, blocklist it at perimeter devices, and monitor outbound connections for any attempts to resolve or contact the IP address. Given the Cloudflare Pages hosting, any future redeployment could reuse the same IP, so continuous re‑evaluation of the domain’s reputation is advisable. Organizations that observe traffic to avc-bridge.pages.dev should investigate associated user activity, isolate potentially compromised accounts, and consider threat‑intel sharing with peers to improve collective detection capability.