io-bridge-web[.]typedream[.]app

This domain, io-bridge-web.typedream.app, is flagged as a high-risk brand impersonation threat targeting Trezor, a well-known cryptocurrency hardware wallet provider. Analysis indicates the site presents itself as an official Trezor Bridge application, using the page title 'Trezor Bridge® | Introducing the New Trezor App | Trezor' to deceive users into believing it is legitimate. The threat type suggests an attempt to harvest credentials, distribute malicious software, or intercept sensitive cryptocurrency transactions by exploiting trust in the Trezor brand. Infrastructure analysis reveals several technical indicators of compromise. The domain is registered through Typedream and resolves to the IP address 188.114.96.3. It holds a VirusTotal detection score of 5/95, meaning five security vendors have flagged it as malicious. The SSL certificate is issued by Google Trust Services, which, while not inherently suspicious, is often leveraged by threat actors to lend a false sense of security. No creation date is provided, but the domain remains active and unblocked by major threat intelligence feeds, indicating limited visibility or delayed response from security platforms. As of the latest assessment, the domain remains active and poses a significant risk to users unfamiliar with official Trezor infrastructure. No evidence of takedown or sinkholing has been observed, and the site continues to resolve normally. Users are advised to avoid interacting with this domain and to verify the authenticity of any Trezor-related software through official channels only. The combination of brand impersonation, low detection rates, and active status underscores the need for heightened vigilance and proactive blocking of this infrastructure in enterprise and personal security environments.