tzer-bridg-eng[.]pages[.]dev

The domain tzer-bridg-eng.pages.dev is currently active and engaged in a brand impersonation attack specifically targeting Trezor, a well-known cryptocurrency hardware wallet company. The page title, Trezor Bridge — The Secure Gateway to Your Device®, is designed to deceive users into believing they are accessing an official Trezor service. This threat is classified as high risk due to its potential to steal sensitive credentials or funds from unsuspecting victims.

According to intelligence data, this domain is flagged by 8 out of 95 VirusTotal security vendors and appears on one security blocklist. It was registered through Cloudflare, Inc. and created on April 4, 2026. The domain resolves to IP address 188.114.97.3 and uses an SSL certificate issued by Google Trust Services / WE1. These indicators collectively point to a malicious operation that leverages a trusted brand to lure victims.

As the domain remains active, users are strongly advised to avoid interacting with it or any links pointing to it. PhishDestroy recommends that organizations and individuals verify the legitimacy of any Trezor-related communications by visiting the official Trezor website directly. If you encounter this domain, report it to relevant security teams and block access to prevent credential theft or financial loss.