brdge-io-trzoe[.]pages[.]dev
“Trezor Bridge — The Secure Gateway to Your Hardware Wallet”
brdge-io-trzoe.pages.dev — 内容不可用. 品牌冒充:Trezor; 诈骗类型:Brand Impersonation. 证据摘要: VirusTotal 7/94 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, G-Data); URLScan malicious verdict; PhishDestroy score 76/100. 注册商: Cloudflare.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain brdge-io-trzoe.pages.dev has been identified as a brand impersonation threat specifically targeting Trezor, a well-known hardware wallet provider. Analysis confirms the domain was designed to mimic Trezor Bridge, the legitimate software interface for Trezor devices, with the intent to deceive users into interacting with malicious infrastructure. The domain is currently offline, but prior activity indicates a high-risk profile for crypto-related fraud or credential compromise. Infrastructure analysis reveals the domain was flagged by 10 of 95 security vendors on VirusTotal, indicating widespread detection as malicious. It was registered through Cloudflare, Inc. on April 02, 2026, and resolved to the IP address 188.114.97.3. The domain appears on one security blocklist and holds a Gridinsoft trust score of 0/100, further corroborating its malicious nature. The SSL certificate is issued by Google Trust Services, which, while legitimate, does not mitigate the domain's fraudulent purpose. The page title, 'Trezor Bridge — The Secure Gateway to Your Hardware Wallet,' directly mirrors the branding of the authentic Trezor software, enhancing its deceptive appearance. Current status confirms the domain has been taken offline, likely due to enforcement actions or detection by security systems. However, the infrastructure and indicators associated with this domain remain relevant for threat intelligence purposes. Users and organizations are advised to block the domain and its associated IP address at the network level. Trezor device owners should verify the authenticity of any software downloads by accessing official sources only and cross-referencing digital signatures. Security teams should monitor for similar impersonation attempts, particularly those leveraging Cloudflare Pages or other content delivery networks to host fraudulent interfaces. Proactive measures, such as endpoint detection rules and user education on brand impersonation tactics, are recommended to mitigate future risks.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of brdge-io-trzoe.pages.dev · checked Jun 26, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。