my-trezor-suite[.]typedream[.]app

The domain my-trezor-suite.typedream.app has been identified as a high-risk brand impersonation resource targeting users of Trezor cryptocurrency wallet software. Analysis confirms the domain is actively engaged in fraudulent activity, presenting itself as the official Trezor Suite application to deceive users into disclosing sensitive credentials or installing malicious software. The threat type is classified as brand impersonation, with the specific target being Trezor, a widely recognized hardware wallet provider. Infrastructure analysis reveals the domain is registered through Typedream and currently resolves to the IP address 188.114.96.3. Detection metrics indicate the domain has been flagged by 14 out of 95 security vendors on VirusTotal, while three independent security blocklists—PhishDestroy, MetaMask, and SEAL—have explicitly blocked access to it. The domain employs a valid SSL certificate issued by Google Trust Services, which may lend an appearance of legitimacy to unsuspecting users. Additional technical indicators include the use of Node.js, React, Next.js, and multiple Google Cloud services, suggesting a sophisticated deployment designed to evade basic detection mechanisms. The Gridinsoft trust score for this domain is 0 out of 100, further corroborating its malicious classification. As of the latest assessment, my-trezor-suite.typedream.app remains active and continues to pose a significant risk to users. Organizations and individuals are advised to implement immediate network-level blocking of the domain and its associated IP address, 188.114.96.3. End-users should be alerted to verify the authenticity of any Trezor-related communications or software downloads by accessing only the official domain, trezor.io. Security teams are encouraged to monitor for related indicators of compromise, including connections to the identified IP and any attempts to access the fraudulent domain. Proactive measures, such as deploying endpoint detection rules and educating users on recognizing brand impersonation tactics, are strongly recommended to mitigate potential exposure.