trezr-brige-us-nifo[.]wasmer[.]app

Analysis indicates that trezr-brige-us-nifo.wasmer.app is an active phishing domain targeting cryptocurrency users, specifically those associated with Trezor wallet services. As of August 2, 2026, the domain is flagged by 8 of 91 security vendors on VirusTotal, confirming detection by multiple threat intelligence sources. It is also blocked by PhishDestroy and appears on one additional security blocklist, reinforcing its classification as high-risk. Infrastructure analysis reveals the domain is hosted on IP address 62.210.172.162 and uses nameservers alpha.ns.wasmernet.com and beta.ns.wasmernet.com, both associated with Wasmer Inc., the registrar and hosting provider.

The domain remains operational, with no evidence of takedown or sinkholing. While the exact content of the site has not been fully analyzed, the naming convention (trezr-brige-us-nifo) strongly suggests an attempt to impersonate Trezor, a well-known hardware wallet provider, likely to harvest credentials or private keys. Defenders should treat this domain as malicious and prioritize blocking it at the DNS, proxy, or endpoint level.

Network traffic to 62.210.172.162 should be investigated for potential compromise, particularly in environments where cryptocurrency-related activity is common. No SSL certificate details or HTTP status codes are provided, so additional verification of TLS validity is recommended. Given the domain's active status and confirmed detections, assume it is part of an ongoing phishing campaign unless further evidence indicates otherwise.