apps-terzor---bridge[.]pages[.]dev

The domain apps-terzor---bridge.pages.dev is flagged as a brand impersonation threat targeting the Trezor brand. This domain was likely used to deceive users into believing they were interacting with official Trezor services, potentially leading to credential theft or financial loss.

Technical indicators reveal that the domain has a VirusTotal (VT) score of 9/95, indicating that 9 out of 95 security vendors have identified it as malicious. The domain is registered through Cloudflare, Inc., and resolves to the IP address 188.114.97.3, which is located in CA and hosted by Cloudflare, Inc. The domain was created on March 22, 2026, and appears on one security blocklist. It uses an SSL certificate issued by Google Trust Services / WE1, which may have been used to lend a false sense of security to potential victims.

The domain is currently offline, which suggests that it has been taken down by the registrar or security organizations. Despite its offline status, the domain remains a potential risk if it is reactivated. Organizations and individuals should ensure that any links or domains related to Trezor are verified through official channels. Additionally, security teams should monitor for any similar domains and take proactive measures to block or report them to prevent future incidents.