trez-usa-bridge[.]pages[.]dev

This domain is under investigation for brand impersonation targeting Trezor. Registered on April 24, 2026 through Cloudflare, Inc., it resolves to IP 172.66.47.121 and uses Cloudflare infrastructure with HSTS and HTTP/3 support. The page title 'Trezor Bridge — Complete Guide' suggests an attempt to mimic official Trezor software resources. The SSL certificate is issued by Google Trust Services. While VirusTotal shows 0 detections among 95 vendors, this does not confirm safety as the domain may be recently active or evading detection. Gridinsoft assigns a trust score of 0/100, and it appears on one security blocklist. PhishDestroy has blocked the domain. Defenders should treat this as suspicious due to the combination of a recently registered domain, impersonation of a well-known cryptocurrency hardware wallet brand, and low trust scores. Recommended actions include monitoring for associated email campaigns, verifying if the domain hosts active phishing forms, and blocking access at network level until a full analysis is completed. The absence of confirmed malicious content in scans does not outweigh the risk indicators present.