startd-bridge-trzr[.]wixstudio[.]com

This domain is flagged as a high-risk phishing site designed to impersonate Trézór Bridge, a legitimate cryptocurrency hardware wallet connectivity tool. The site presents itself as a secure crypto connectivity solution, likely targeting users of Trézór hardware wallets to harvest login credentials, recovery seeds, or other sensitive authentication details. The fraudulent page mimics the branding and interface of the authentic Trézór Bridge software, increasing the likelihood of deception for unsuspecting users seeking to manage their crypto assets. Analysis indicates the domain was registered through GoDaddy.com, LLC and resolves to the IP address 34.144.206.118, hosted on Google Cloud infrastructure. Security vendors on VirusTotal flagged the domain, with 13 out of 95 engines detecting malicious activity. The site appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD. Technical indicators reveal the use of Wix hosting, React framework, Google Cloud CDN, and HTTP/3 protocol, alongside a Let's Encrypt SSL certificate, which may lend a false sense of legitimacy. Users who visited this domain should immediately revoke any permissions granted to the site in their browser or wallet applications. If credentials or recovery phrases were entered, affected individuals must transfer assets to a new wallet and consider their original wallet compromised. Monitor all connected accounts for unauthorized transactions and enable multi-factor authentication where available. Security teams should block the domain and associated IP address (34.144.206.118) at the network level to prevent further exposure.