home-trezur-bridge[.]pages[.]dev

Analysis of the domain home-trezur-bridge.pages.dev indicates active brand impersonation targeting Trezor, a cryptocurrency hardware wallet provider. The domain was registered on April 9, 2026, through Cloudflare, Inc., and currently resolves to the IP address 188.114.96.3. The page title, 'Trezor Bridge (Official) | Secure & Smooth Crypto Access,' explicitly claims affiliation with Trezor, aligning with the reported threat type of brand impersonation. This domain is flagged by at least one security blocklist and has been blocked by PhishDestroy, further corroborating its malicious classification. Infrastructure analysis reveals the domain is hosted on Cloudflare Pages, a platform commonly used for both legitimate and malicious content. The SSL certificate is issued by Google Trust Services, which does not inherently indicate legitimacy but provides encrypted connections to visitors. Detection metrics from Gridinsoft assign a trust score of 0/100, reflecting a high-risk assessment. While VirusTotal reports only one of 95 security vendors flagging the domain, this limited detection does not diminish the confirmed impersonation activity. The domain remains active as of July 12, 2026, posing an ongoing risk to users who may mistake it for the legitimate Trezor service. Defenders are advised to treat this domain as malicious and implement blocking measures at the network and endpoint levels. Further investigation into associated infrastructure, such as the resolving IP and registrar details, may reveal additional related threats. No evidence currently suggests the use of a specific phishing kit or additional attack vectors beyond brand impersonation.