trezor-in--bridge[.]pages[.]dev

This domain is flagged for impersonating Trezor Bridge, a legitimate cryptocurrency wallet management tool. The site presents itself as "Trezõr® Brïdge® | Secure Crypto Management" to deceive users into entering sensitive wallet credentials, seed phrases, or private keys. Infrastructure analysis reveals the domain was created on April 27, 2026, and is hosted through Cloudflare with an SSL certificate issued by Google Trust Services, resolving to IP address 188.114.96.3. The page employs HSTS and HTTP/3 protocols, which may lend an appearance of legitimacy to unsuspecting users.

Technical evidence confirms the malicious nature of this domain. VirusTotal reports that 1 out of 95 security vendors has flagged trezor-in--bridge.pages.dev as malicious, while Gridinsoft assigns it a trust score of 0/100. The domain appears on one security blocklist and is currently blocked by PhishDestroy. Despite its offline status, historical records indicate it was actively used for brand impersonation, targeting users of the Trezor hardware wallet ecosystem.

Users who visited this domain should immediately revoke any credentials or private keys entered on the site. Disconnect any wallets linked to the domain and monitor for unauthorized transactions. If crypto assets were exposed, consider transferring remaining funds to a new wallet with a fresh seed phrase. Enable multi-factor authentication on all crypto-related accounts and report the incident to relevant security teams for further investigation. Avoid interacting with any communications or prompts originating from this domain, even if they appear to come from legitimate sources.