bridge-s-guide[.]pages[.]dev

The domain bridge-s-guide.pages.dev is a phishing site engaged in brand impersonation targeting Trezor, a cryptocurrency hardware wallet provider. It presents itself as a legitimate Trezor support or setup page to deceive users into disclosing sensitive information or interacting with malicious cryptocurrency transactions. No drainer kit was identified, but the site was actively used for cryptocurrency-related scams. As of the latest verification, bridge-s-guide.pages.dev has been taken offline.

Technical indicators confirm the malicious nature of bridge-s-guide.pages.dev. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Kaspersky and Phishing Database. It appears on 1 security blocklist (PhishDestroy) but was not flagged by Google Safe Browsing. Registered through Cloudflare, Inc. on September 19, 2025, the domain resolves to the IP address 188.114.97.3, hosted by Cloudflare in Canada. The SSL certificate is issued by Google Trust Services / WE1, and the observed page title was 'Getting Started with Trezor Suite — Secure Your Crypto'. Technologies detected include HSTS, Cloudflare, and HTTP/3, with a current HTTP status of 403.

Users who interacted with bridge-s-guide.pages.dev should immediately revoke any token approvals granted to unknown contracts and transfer cryptocurrency funds to a new, secure wallet. Monitor accounts for unauthorized transactions and enable two-factor authentication (2FA) on all related services. Report the phishing domain to the impersonated brand (Trezor) and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to assist in broader mitigation efforts.