trazor-brized[.]pages[.]dev
“Trezor Bridge | Download”
trazor-brized.pages.dev — Raggiungibile · accesso limitato (HTTP 403). Simulazione del marchio: Trezor; Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 2/94 (ADMINUSLabs, Kaspersky); URLScan malicious verdict; PhishDestroy score 61/100. Registrar: Cloudflare.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Analysis of trazor-brized.pages.dev shows a newly registered domain (created 24 Mar 2026) that hosts a page titled “Trezor Bridge | Download”. The page title and the explicit reference to the Trezor brand indicate a brand-impersonation campaign aimed at cryptocurrency users. The site is served through Cloudflare, using the nameservers cesar.ns.cloudflare.com and ximena.ns.cloudflare.com, and resolves to IP 188.114.96.3, an address owned by Cloudflare in Canada. The TLS certificate is issued by Google Trust Services under the WE1 root, confirming that the connection is encrypted but that the certificate is unrelated to the Trezor brand. HTTP requests return a 403 status, suggesting that the site is currently inaccessible, and the domain has been taken offline.
Despite the offline state, the domain is listed on at least one public blocklist and is flagged by PhishDestroy. VirusTotal reports that 2 of 94 security vendors have flagged the domain, confirming that some scanners have identified malicious behavior. The Gridinsoft trust score of 0/100 further reflects a poor reputation. The infrastructure leverages modern protocols (HTTP/3) and enforces HSTS, which can aid evasion by appearing legitimate. The combination of Cloudflare hosting, a valid TLS certificate, and a page title that mimics an official Trezor download page is typical of crypto-related scams that attempt to lure victims into downloading compromised software.
What remains uncertain is the exact payload or malicious code that may have been delivered while the site was active, as the page content has not been captured. Defenders should block the domain at DNS and proxy layers, monitor for any outbound connections to the IP 188.114.96.3, and include the domain in indicator-of-compromise (IOC) feeds. Enterprises with users who manage Trezor hardware wallets should issue user awareness advisories referencing the “Trezor Bridge | Download” title and remind users to obtain software only from official trezor.
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Informazioni forensi
Tecnologie · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of trazor-brized.pages.dev · checked Mar 24, 2026
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo