concet-trezor-auth-us[.]typedream[.]app

This domain operates as a credential harvesting site targeting Ethereum wallet users by impersonating the official Trezor Suite interface. Visitors encounter a fraudulent login portal designed to capture recovery phrases, private keys, or other sensitive authentication details under the guise of legitimate wallet management. The page title, 'Trezor Suite (Official) | Desktop & Web Crypto®,' reinforces the deception by closely replicating the branding of the authentic service, increasing the likelihood of user compromise. Analysis indicates the domain was registered on February 21, 2026, through Squarespace Domains II LLC, an unusual registrar choice for cryptocurrency-related services. Infrastructure analysis reveals it resolves to 188.114.97.3, an IP address associated with Cloudflare (AS13335), a common hosting provider for malicious sites due to its anonymity features. Detection metrics further confirm its malicious nature, with 21 out of 95 security vendors on VirusTotal flagging the domain as phishing or brand impersonation. Additionally, the domain appears on one security blocklist, and its SSL certificate, issued by Google Trust Services (WE1), provides a false sense of security to potential victims. Users who have visited conceet-trezor-auth-us.typedream.app should immediately cease all interaction and assume their credentials or recovery phrases have been compromised. Disconnect any connected wallets from the internet and transfer assets to a new, secure wallet using a trusted device. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where possible. Report the incident to relevant security teams or cryptocurrency abuse databases to aid in takedown efforts. Avoid reusing passwords or recovery phrases from the compromised session, as attackers may attempt to exploit them across other platforms.