en-trezor-io-login[.]typedream[.]app

This report details a fraudulent domain, en-trezor-io-login.typedream.app. The site page title displays "404: This page could not be found," but its domain structure and brand impersonation indicate it was designed to mimic Trezor, a cryptocurrency hardware wallet service. The threat posed is a cryptocurrency phishing or credential harvesting attack, where visitors may be tricked into entering sensitive login information or private keys under the false pretense of a legitimate Trezor portal.

Technical evidence confirms malicious activity. VirusTotal analysis shows 8 out of 95 security vendors flagged the domain as malicious. Flagging vendors include ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, and CyRadar. The domain is listed on 1 blocklist. It is registered with Squarespace Domains II LLC, was created on 2026-02-21, and resolves to IP address 104.21.37.85 located in the United States, hosted by AS13335 Cloudflare, Inc. The site uses an SSL certificate issued by Google Trust Services / WE1.

The domain is currently DOWN/OFFLINE, which limits immediate threat activity. However, its DOM risk score is 68, indicating a moderate-to-high risk profile. This domain should be permanently blocked and monitored for any reactivation attempts.