intro-bridge-suites[.]pages[.]dev

PhishDestroy identifies the domain intro-bridge-suites.pages.dev as a confirmed phishing site running a RapidShare-branded dropper kit. The page masquerades as a legitimate RapidShare suite installer portal, luring victims with claims of premium file-hosting features while silently surreptitiously exfiltrating cryptocurrency via malicious browser extensions or clipboard hijackers. Threat actors behind this campaign leverage Cloudflare Pages for rapid site deployment and abuse Google Trust Services certificates to bolster credibility, targeting users searching for RapidShare utilities or cracked software installers.

Technical analysis of intro-bridge-suites.pages.dev reveals a pristine infrastructure with zero detections on VirusTotal (11/95 engines flagged as malicious), despite hosting an active RapidShare-themed dropper. The domain resolves to IP 172.66.47.166 through Cloudflare, Inc., demonstrating recent registration via Cloudflare Registrar. Google Safe Browsing currently lists the domain as unsafe, though it remains unblocked by major threat intelligence feeds. Creation date aligns with current campaign activity, indicating a recently activated infrastructure designed for short-lived campaigns.

As of current assessment, intro-bridge-suites.pages.dev remains active with high-risk potential due to its sophisticated mimicry of legitimate RapidShare branding and services. PhishDestroy has flagged the domain and escalated indicators to domain registrars and hosting providers for deactivation. Users are urged to avoid downloading executables from this domain or similar RapidShare-themed portals. Remaining risk is assessed as elevated given the lack of widespread blocklisting; vigilance and heuristic scanning are recommended until deactivation occurs.