enus-trez-bridge[.]zapier[.]app

This domain, enus-trez-bridge.zapier.app, is identified as a high-risk credential phishing infrastructure targeting users of Trézor hardware wallets. Analysis indicates the page impersonates the official Trézor Bridge software, a legitimate tool used for communication between Trézor devices and web browsers. The fraudulent site uses the title 'Official Trézor® Bridge®®' to deceive victims into believing they are interacting with a trusted service, likely aiming to harvest sensitive credentials or cryptocurrency wallet details. Infrastructure analysis reveals the domain resolves to the IP address 64.239.123.65 and is flagged by 21 out of 95 security vendors on VirusTotal. The domain appears on one security blocklist, though additional context such as registrar details or creation date remains undisclosed in current intelligence. Google Safe Browsing (GSB) status is not explicitly provided, but the presence on a blocklist and the VirusTotal detection rate confirm its malicious classification. As of the latest assessment, enus-trez-bridge.zapier.app remains active, continuing to pose a significant risk to unsuspecting users. Response actions should include immediate blocking of the domain and IP at the network level, alongside user education to recognize phishing attempts targeting cryptocurrency-related services. Despite potential takedown efforts, the domain's persistence underscores the need for continuous monitoring and proactive threat mitigation to prevent credential compromise or financial loss.