trezr-ridge[.]pages[.]dev

The domain trezr-ridge.pages.dev was created on March 23, 2026 and is currently listed as offline. It resolves to the Cloudflare edge address 188.114.96.3, which is geolocated to Canada and is hosted by Cloudflare, Inc. The registration was performed through Cloudflare, Inc., and the domain uses Cloudflare’s DNS infrastructure (aurora.ns.cloudflare.com and denver.ns.cloudflare.com). The site presents a valid SSL certificate issued by Google Trust Services under the WE1 root, indicating proper TLS termination at the CDN edge. Observed web technologies include HTTP Strict Transport Security (HSTS) and HTTP/3, both typical of Cloudflare‑served sites.

The HTTP response code returned was 403, suggesting the resource is inaccessible at the time of testing. The page title returned by the server is "trezor bridge," and the campaign is classified as a crypto scam that impersonates the Trezor brand. Threat intelligence shows that nine of ninety‑four security vendors on VirusTotal flagged the domain, and it appears on a single external blocklist. The domain has a Gridinsoft trust score of 0 out of 100, reinforcing the malicious assessment.

PhishDestroy has already blocked the domain. Given the elevated risk rating, defenders should add trezr-ridge.pages.dev and its resolving IP 188.114.96.3 to network deny lists, monitor DNS queries for re‑registration or related subdomains, and enforce URL filtering based on the observed page title and brand reference. Continuous telemetry should be collected for any resurgence, and any inbound traffic to the IP should be inspected for malicious payloads or credential harvesting attempts.