docs--trezo-brddge-io[.]pages[.]dev

PhishDestroy identifies this domain as a credential phishing page mimicking a legitimate login portal to harvest user credentials and session tokens. The page likely impersonates a financial or service platform to trick victims into entering sensitive information. Cloudflare Workers hosts the malicious content, which resolves to IP 172.66.46.225 and uses a Google Trust Services SSL certificate to appear legitimate. The domain structure—docs--trezo-brddge-io.pages.dev—employs a double-hyphen pattern and misspelled segments, a common tactic to evade exact-match detection engines. This domain was flagged as a generic phishing threat on PhishDestroy with 0 detections on VirusTotal out of 95 engines scanned, raising concerns due to undetected deployment. It was registered through Cloudflare, Inc., a known privacy-focused registrar often abused by threat actors to mask true ownership. The page has not yet been widely blocked, with no entries in major threat intelligence feeds, increasing exposure risk for unsuspecting users. If you visited docs--trezo-brddge-io.pages.dev, immediately change any passwords entered on the site and revoke potentially compromised sessions. Scan your device for malware and monitor financial accounts for suspicious transactions. Report the domain to PhishDestroy to aid in blocking efforts. Do not re-enter credentials even if the page seems to load correctly—SSL certificates alone do not guarantee legitimacy.