bridge--a-public-trezor[.]typedream[.]app

This domain, bridge--a-public-trezor.typedream.app, is flagged for high-risk brand impersonation targeting Trezor hardware wallet users. Analysis indicates the site mimics the official Trezor Bridge interface, a legitimate software component used to facilitate communication between Trezor devices and web browsers. The impersonation aims to deceive users into entering sensitive credentials, such as wallet recovery seeds or private keys, under the pretense of secure device connectivity. No direct evidence of a drainer kit was observed, but the infrastructure and content strongly suggest credential harvesting as the primary objective. Infrastructure analysis reveals the domain resolves to the IP address 188.114.97.3 and was registered through Typedream, a platform enabling rapid website deployment. The domain is flagged by 19 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. It appears on three security blocklists, including MetaMask and PhishDestroy, and is associated with technologies such as Node.js, React, Next.js, and Cloudflare services. The SSL certificate is issued by Google Trust Services, which, while legitimate, does not mitigate the domain's malicious intent. No creation date was provided, but the domain's current status and detection metrics suggest recent deployment. The domain has been taken offline, reducing immediate risk to users. However, residual threats persist due to potential re-deployment under a different domain or subdomain. Users who interacted with the site should assume credential exposure and take immediate action, including revoking wallet access, generating new recovery seeds, and monitoring for unauthorized transactions. Organizations should update blocklists to include this domain and its associated IP address. Continuous monitoring of similar impersonation patterns targeting hardware wallet infrastructure is recommended, as threat actors frequently adapt tactics to exploit user trust in cryptocurrency-related services.