bridge-ustrezer[.]pages[.]dev

PhishDestroy identifies bridge-ustrezer.pages.dev as an active phishing domain masquerading as a legitimate U.S. banking portal. The threat level has been classified as elevated due to the live credential-harvesting infrastructure and the domain’s deployment on a reputable cloud hosting provider.

This domain was flagged by 1 of 95 VirusTotal security vendors and resolves to IP 172.66.47.123 via Cloudflare, Inc. The SSL certificate is issued by Google Trust Services, which does not indicate legitimacy and is commonly abused in evasion tactics. The page targets unsuspecting users with a spoofed login interface to steal banking credentials or personal information.

To mitigate exposure to this threat, users should immediately block access to bridge-ustrezer.pages.dev using network-level filters or browser-based blocklists. Financial institutions should proactively notify customers of the scam and encourage reporting of suspicious links. Organizations are advised to inspect DNS logs for connections to 172.66.47.123 and audit network security policies to prevent similar abuse of cloud hosting services.