bridge-i-guide[.]pages[.]dev

The domain bridge-i-guide.pages.dev was registered on March 23, 2026 through Cloudflare, Inc. and resolves to the Cloudflare‑owned address 172.66.47.2, which is geolocated to Canada. The site employs Cloudflare infrastructure, presenting HSTS and HTTP/3 support, and serves an SSL certificate issued by Google Trust Services (WE1). An HTTP request to the host returns a 403 status code, indicating the page is currently inaccessible. The page title captured from the site – “Getting Started with Trezor Suite — Secure Your Crypto” – demonstrates a direct brand impersonation of the Trezor hardware wallet, consistent with the classified scam type of a crypto‑related fraud.

Detection telemetry shows the domain is listed on a single security blocklist and has been blocked by PhishDestroy. VirusTotal analysis recorded ten detections out of ninety‑four scanning engines, reinforcing the malicious assessment. Gridinsoft assigns a trust score of 0 / 100, and the overall risk level has been labeled elevated. The domain’s nameservers, damian.ns.cloudflare.com and meilani.ns.cloudflare.com, are both Cloudflare‑controlled.

Current status is offline, limiting immediate exposure but preserving the infrastructure for potential reuse. Defensive recommendations include adding the domain and its resolved IP address to blocklists, monitoring for re‑registration of similar subdomains under the same registrar, and applying URL filtering for any references to the Trezor brand. Continuous observation of threat‑intel feeds for renewed activity is advised.