space-bridge-eng[.]pages[.]dev

Analysis of the domain space-bridge-eng.pages.dev indicates an active brand‑impersonation campaign targeting Trezor. The site returns HTTP 200 and presents the page title “Trezor Bridge – Detailed Guide”, suggesting an attempt to lure users seeking official guidance. DNS resolution points to IP 188.114.97.3, which is owned by Cloudflare, Inc., and the domain was registered on April 30 2026 through Cloudflare’s registrar service. The SSL certificate is issued by Google Trust Services under the WE1 identifier, and the connection employs HSTS, HTTP/3, and Cloudflare‑provided infrastructure, as reflected in the observed nameservers eloise.ns.cloudflare.com and jerry.ns.cloudflare.com. Reputation data show the domain appears on a single security blocklist (PhishDestroy) and has been flagged by five of ninety‑one VirusTotal scanners. Gridinsoft assigns a trust score of 0 / 100, further indicating malicious intent. No additional intelligence on the page content or payload has been disclosed, leaving the exact phishing mechanism uncertain. Defenders should block the domain at network perimeter, update URL filtering and DNS sinkhole rules, and monitor for related traffic to the Cloudflare‑hosted IP address. Ongoing observation is advised to capture any future changes in hosting or payload delivery.