bridge-use[.]zapier[.]app

The domain bridge-use.zapier.app has been identified as an elevated-risk brand impersonation threat specifically targeting Trezor, a well-known cryptocurrency hardware wallet provider. This phishing domain is currently offline, but its recent activity poses significant risks to users seeking to manage their cryptocurrency assets. The page title observed was "Trezor Bridge: Secure," a clear attempt to mimic legitimate Trezor software interfaces and deceive users into believing they are on an official Trezor website.

Technical indicators reveal that the domain was created on April 8, 2026, and is registered through Name.com, Inc. It resolves to the IP address 64.239.109.193 and uses an SSL certificate issued by Let's Encrypt (R12), which gives it a false sense of security. VirusTotal data shows that 9 out of 95 security vendors flag this domain as malicious, and it appears on one security blocklist. These factors contribute to an elevated risk level, as the domain leverages a trusted brand and basic encryption to appear legitimate.

Given that the domain has been taken offline, the immediate threat is neutralized, but users should remain vigilant. PhishDestroy recommends that anyone who may have interacted with this domain—especially those who downloaded files or entered credentials—should change their passwords immediately and enable two-factor authentication on their Trezor accounts. Additionally, users should always verify official Trezor URLs directly from the company's website and avoid clicking on links from unsolicited messages or search results. Continuous monitoring for similar domains is advised.