us-io-tzore-io[.]typedream[.]app

The domain us-io-tzore-io.typedream.app is currently flagged as an active generic phishing site with an elevated risk rating. Infrastructure analysis shows the domain resolves to the IP address 172.67.206.36, which is hosted on a cloud provider commonly used by malicious actors. The domain has been added to at least one security blocklist and was blocked by the PhishDestroy service, indicating that upstream filtering solutions are already aware of its malicious nature. VirusTotal scans report that nine out of ninety‑one antivirus and URL‑reputation engines have identified the domain as malicious, providing a modest but notable consensus among detection vendors.

No additional public indicators such as page title, brand targeting, or SSL certificate details are presently available, limiting the ability to attribute a specific victim profile or lure type. The lack of visible brand references suggests the site may be employing a generic credential‑harvesting template rather than a targeted impersonation campaign. Defenders should prioritize adding the domain and its associated IP address to deny‑list rules across DNS, proxy, and firewall layers.

Continuous monitoring of the IP block for new subdomains or related hostnames is advised, as the attacker may reuse the same hosting environment for future campaigns. Organizations should also incorporate the domain hash into endpoint detection and response (EDR) signatures to catch any attempted connections. Given the limited public intelligence, threat hunters should remain vigilant for any outbound traffic to the 172.67.206.36 address and correlate it with user‑initiated login attempts that could be redirected to this malicious endpoint.