trgr-bridge[.]pages[.]dev

The domain trgr-bridge.pages.dev is a phishing site engaged in brand impersonation targeting Trezor, a cryptocurrency hardware wallet provider. It presents itself as 'Trezor Bridge – Empowering Secure Crypto Connectivity' to deceive users into believing it is an official service, posing an elevated risk of cryptocurrency-related scams. As of the latest verification, trgr-bridge.pages.dev has been taken offline, though it previously operated without an associated drainer kit.

Technical indicators confirm the malicious nature of trgr-bridge.pages.dev. The domain was flagged by 2 of 95 security vendors on VirusTotal, including LevelBlue and the Phishing Database, and appears on 1 security blocklist (PhishDestroy). Registered through Cloudflare, Inc. on September 18, 2025, it resolves to the IP address 188.114.97.3, hosted by Cloudflare in Canada. The SSL certificate is issued by Google Trust Services (WE1), and the domain employs technologies such as HSTS, Cloudflare, and HTTP/3. The observed HTTP status was 403, and the Gridinsoft trust score for the domain is 0/100.

Users who interacted with trgr-bridge.pages.dev should immediately revoke any token approvals granted to unknown or suspicious addresses and transfer their cryptocurrency funds to a new, secure wallet. Enable two-factor authentication (2FA) on all accounts, particularly those related to cryptocurrency or financial services. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the impersonated brand’s official abuse channels to aid in mitigation efforts.