web-trezoed-bridged[.]pages[.]dev

PhishDestroy identifies web-trezoed-bridged.pages.dev as an active phishing domain impersonating Trezor’s official hardware wallet bridge service. The fraudulent page masquerades as a secure connectivity tool to deceive users into entering sensitive wallet credentials or downloading malicious payloads.

Intelligence gathered on seed 581734 reveals this domain is registered through Cloudflare, Inc., resolves to IP 172.66.47.156, and currently holds a Google Trust Services SSL certificate. Despite zero detections across 95 VirusTotal vendors as of the latest scan, the page title ('Trezor Bridges | Connect Your Hardware Wallet Securely') closely mimics legitimate Trezor documentation, indicating high deception potential. No historical blocklist presence or domain age data is currently available, leaving its operational timeline undetermined.

This domain remains active and poses an immediate risk to cryptocurrency users seeking to connect hardware wallets. PhishDestroy recommends blocking access to web-trezoed-bridged.pages.dev at the network perimeter and advising users to only use the official Trezor Bridge service, available exclusively via trezor.io or trusted distribution channels. Users who may have interacted with this page should revoke any exposed credentials, transfer assets to a new wallet if private keys were exposed, and scan systems for follow-on malware. Cloudflare-based domains require heightened scrutiny due to their legitimate but easily abused infrastructure, reinforcing the need for strict content verification.