access-bridge-en[.]pages[.]dev

Analysis of access-bridge-en.pages.dev shows that the domain was created on 21 February 2026 and is registered through Cloudflare, Inc. The authoritative nameservers are donna.ns.cloudflare.com and randy.ns.cloudflare.com, indicating that the site is fully proxied by Cloudflare’s network. DNS resolution points to IP 172.66.46.244, an address owned by AS13335 Cloudflare, Inc. and located in the United States. The site presented an HTTPS certificate issued by Google Trust Services under the WE1 root, confirming that TLS termination occurs at Cloudflare. When accessed, the server returned HTTP 403, and the page title displayed "Suspected phishing site | Cloudflare," which is a generic block page used by Cloudflare for takedown requests.

The domain is currently listed as offline and has been blocked by the PhishDestroy blocklist, appearing on one additional security blocklist. Reputation scoring from Gridinsoft assigns a trust score of 0 / 100, reflecting a complete lack of confidence. VirusTotal analysis recorded nine detections out of ninety‑three scanning engines, reinforcing the malicious classification.

The documented scam type is a crypto‑related scam, though the exact payload or victim‑interaction flow has not been publicly disclosed. defenders should continue to block the domain at perimeter defenses, monitor for any resurgence of the host on the same IP range, and consider adding the IP address 172.66.46.244 to blacklists. Ongoing surveillance of Cloudflare‑proxied assets is advised, as the infrastructure can be rapidly repurposed for new malicious campaigns.