bredge-trezorta[.]pages[.]dev

This domain, bredge-trezorta.pages.dev, is flagged as a brand impersonation campaign targeting the Trezor brand. The domain was registered through Cloudflare, Inc. on March 22, 2026, and currently resolves to the IP address 172.66.47.117, which is located in Canada and is hosted by Cloudflare, Inc. The page title, 'Ledger® Wallet Live — Getting Started | Official Ledger™ Live App,' suggests an attempt to mimic the official Ledger Live app, which could mislead users into believing they are accessing a legitimate service. This domain appears on one security blocklist, specifically PhishDestroy, and has been flagged by 13 out of 94 security vendors on VirusTotal, indicating a notable level of suspicion among security researchers. The Gridinsoft trust score for this domain is 0/100, reflecting a complete lack of trust.

Infrastructure analysis reveals the use of HSTS, Cloudflare, and HTTP/3 technologies, which can enhance the credibility of the site and make it more difficult for users to discern its fraudulent nature. The SSL certificate is issued by Google Trust Services, further adding to the potential for user deception. As of the report date, July 23, 2026, the domain is offline, returning an HTTP status code of 403.

Despite the current offline status, the elevated risk level and the specific impersonation of the Trezor brand suggest that this domain was part of a crypto scam campaign. Defenders should remain vigilant and ensure that their systems and users are aware of the potential for such impersonation attacks. It is recommended to block this domain and similar variants, and to educate users on the importance of verifying the legitimacy of websites through official channels.