SafeMode - Analysis: trezor-bridge-web-sso.typedream.app

Visual Capture

No screenshot available

Detection Info

https://trezor-bridge-web-sso.typedream.app/

Detected Brand

Trezor

Country

International

Confidence

100%

HTTP Status

200

Report ID

d1b14ad3-28a…

Analyzed

2025-12-20 15:16

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1A073F98A5455202A472740F384BB1FC9B7395C2FF92946D1A4B8C7E5B3DC8F1326AB4B
CONTENT ssdeep	768:CyWuq1yPUQFWuZsi51n/LLM9XTXX8UM3agZhvaKgvjC51D01DcaRc/gZ4H+SIQY6:UvIedtSayOloQzZs8oWQbp

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	8818d660e1f636ef
VISUAL aHash	7e1f0f0f0100ffff
VISUAL dHash	bcf1fdd7d3dd3947
VISUAL wHash	7e0d0f030100ffff
VISUAL colorHash	07608010000
VISUAL cropResistant	bcf073fdddd3cbdd,fca28aa63392a294,a282d04b1351aaa2,39027d2f3f514040,fcf17dfdd7d3cfbd,45451b98e46b4523

Code Analysis

Risk Score 70/100

Threat Level ALTO

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Brand impersonation phishing targeting cryptocurrency users.
• Target: Trezor hardware wallet users.
• Method: The website attempts to impersonate Trezor with the goal of redirecting users to a malicious site.
• Exfil: Unknown; the goal is likely to redirect to a credential harvesting site.
• Indicators: Domain does not match the official Trezor website, uses a free hosting service (typedream.app).
• Risk: HIGH - Potential redirection to a malicious site for credential theft or malware installation.