my-trezor-io-get[.]typedream[.]app

This domain, my-trezor-io-get.typedream.app, is assessed as high risk due to active brand impersonation targeting Trezor users. The specific threat type is a fake login page designed to capture sensitive authentication credentials by mimicking the official Trezor wallet interface. The page title, 'Trézor®®Wallet Login The (official) wallet | Trézor®', directly leverages brand trademarks, increasing the likelihood of user deception and credential harvesting.

Technical analysis reveals several supporting indicators of compromise. VirusTotal currently lists the domain as flagged by 2 out of 95 security vendors, demonstrating limited but present detection. The domain is registered through the Typedream platform and utilizes an SSL certificate issued by Google Trust Services, which may lend an appearance of legitimacy to potential victims. DNS resolution points to IP address 188.114.97.3. At the time of reporting, the domain remains active and is not broadly blocklisted. The use of official-looking branding, combined with the low but nonzero detection rate, indicates an ongoing and evolving threat targeting the cryptocurrency sector.

To mitigate risk, users should avoid interacting with this domain and remain vigilant for similar brand impersonation attempts. Security teams are advised to add my-trezor-io-get.typedream.app and its associated IP address (188.114.97.3) to blocklists and monitor for related indicators in network traffic. End-users should be educated to verify URLs before entering credentials, particularly with cryptocurrency platforms. Incident response processes should include the analysis of credential submissions to this domain and prompt user notification in the event of suspected compromise.