trzr-bridg-g[.]pages[.]dev

PhishDestroy identifies an active crypto-draining phishing site hosted at trzr-bridg-g.pages.dev. This domain mimics a cryptocurrency bridge, tricking users into connecting wallets that are drained of tokens via malicious smart contracts. The page is served from Cloudflare Pages, resolving to IP 172.66.47.57 with a Google Trust Services SSL certificate, hiding the malicious infrastructure behind legitimate services. This domain was flagged as a generic phishing host with 0/95 VirusTotal detections at the time of analysis, indicating minimal recognition by antivirus engines. Registered through Cloudflare, Inc., the site leverages Pages.dev for rapid deployment and evasion. The exact configuration (seed 767efe) suggests targeted, iterative campaigns rather than mass spam. If you visited this site, immediately revoke wallet connections in your wallet settings and transfer remaining funds to a fresh address. Scan your device for malware and rotate all account passwords accessed from the same browser. Report the domain to PhishDestroy for deactivation and share your indicators—such as wallet addresses and transaction hashes—with their team to aid takedown efforts.