app-trzr-bridge[.]pages[.]dev

The domain app-trzr-bridge.pages.dev has been identified as a brand impersonation phishing site targeting Trezor users. This threat is classified as high risk and remains active. The page title, "How Does Trezor Bridge Improve Your Wallet Experience?", is designed to lure victims seeking legitimate Trezor Bridge software, but the actual purpose is to steal cryptocurrency wallet credentials or seed phrases.

Technical analysis reveals that VirusTotal flags this domain with 6 out of 95 security vendors detecting malicious activity. The domain was registered through Cloudflare Pages and created on March 27, 2026. It resolves to IP address 172.66.47.181 and uses an SSL certificate issued by Google Trust Services (WE1). The domain appears on one security blocklist but is not yet flagged by Google Safe Browsing.

As of the latest check, the phishing site remains online and operational. Users who have interacted with this domain should consider their Trezor wallet compromised and transfer assets to a new wallet immediately. PhishDestroy recommends always verifying the official Trezor domain (trezor.io) before downloading any software or entering sensitive information. No response actions have been taken yet, so the risk of credential theft remains high.