overview-en-treezor-us-sso[.]typedream[.]app

This domain, overview-en-treezor-us-sso.typedream.app, is flagged for brand impersonation specifically targeting Trezor, a cryptocurrency wallet provider. The threat type is credential theft, with the page titled 'Trezor @Login. The official wallet*' designed to deceive users into submitting sensitive login details. As of the latest analysis, the domain remains active and operational. Infrastructure analysis reveals the domain resolves to the IP address 188.114.96.3. It has not been flagged by any of the 95 vendors on VirusTotal, indicating a low detection rate at present. The SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy to potential victims. No registrar details or domain creation date were provided in the initial intelligence, and no blocklist entries were recorded. The absence of detections and blocklistings suggests the campaign may still be in its early stages or employing evasion techniques. The domain is currently active and poses a direct risk to users of the Trezor platform. Organizations and individuals are advised to block the domain and its associated IP address (188.114.96.3) at the network perimeter. Users should be educated to verify domain authenticity before entering credentials, particularly for cryptocurrency-related services. Monitoring for similar domains using the seed 'cd8678' or variations of 'treezor' and 'typedream' is recommended to preempt further credential theft attempts.