homepags-bridg[.]pages[.]dev

PhishDestroy identifies homepags-bridg.pages.dev as an active financial phishing site designed to harvest banking credentials and payment-card data under the guise of a legitimate transaction portal. This Cloudflare Pages domain resolves to 188.114.96.3 and leverages a Google Trust Services SSL certificate to appear trustworthy, masking its malicious intent. The infrastructure choice indicates an attempt to evade traditional blocklists by riding Cloudflare’s reputation, while the Pages.dev subdomain further lends an air of legitimacy to unsuspecting users. Analysis of this threat reveals concerning operational security gaps. VirusTotal currently shows 0 detections out of 95 engines, highlighting that signature-based defenses have not yet flagged this domain. Registered through Cloudflare, Inc., this site demonstrates rapid deployment tactics typical of opportunistic credential-harvesting campaigns. While the exact creation date remains unverified, the presence of a Google-issued SSL certificate on 188.114.96.3 indicates recent provisioning, often within hours of domain registration. This aligns with observed patterns where threat actors quickly spin up Cloudflare Pages instances to host phishing lures before detection systems catch up. All users who have interacted with homepags-bridg.pages.dev are strongly advised to immediately change any credentials entered into the site and monitor financial accounts for unauthorized activity. If you visited this domain and provided sensitive information, PhishDestroy recommends running a malware scan using reputable antivirus software and enabling two-factor authentication on all accounts where possible. Report any fraudulent transactions to your financial institution immediately and consider placing a fraud alert or credit freeze with major credit bureaus. Stay vigilant for follow-up phishing attempts leveraging this incident.