home--bridge[.]pages[.]dev

This domain, home--bridge.pages.dev, is flagged as a brand_impersonation threat specifically targeting Trezor, a hardware wallet provider. Analysis indicates the site masquerades as Trezor Bridge, a legitimate software component used to facilitate communication between hardware wallets and web browsers. The page title, 'Trezor Bridge – The Secure Gateway to Your Hardware Wallet,' directly mirrors official branding, increasing the likelihood of user deception. No associated drainer kit signatures have been identified in initial scans, though further forensic analysis of the offline content may reveal additional malicious payloads or credential-harvesting mechanisms. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 172.66.44.104 and was registered on April 18, 2026, through Cloudflare, Inc. Despite its recent creation, the site has already appeared on one security blocklist, specifically PhishDestroy. VirusTotal reports 0 detections out of 95 engines, indicating a lack of prior flagging, while the SSL certificate is issued by Google Trust Services, a legitimate provider commonly abused in phishing campaigns. Gridinsoft assigns a trust score of 0/100, further corroborating the domain's malicious classification. As of the latest assessment, home--bridge.pages.dev has been taken offline, likely in response to detection by security platforms. However, residual risk persists due to the domain's recent registration and the potential for re-deployment under a different infrastructure. Users who accessed the site prior to its takedown should immediately revoke any associated wallet permissions, rotate credentials, and monitor for unauthorized transactions. Organizations are advised to update blocklists with this domain and its resolved IP to prevent future access attempts. Continuous monitoring of newly registered domains with similar naming patterns is recommended to mitigate further impersonation attempts.