overview-un-trezor-web[.]typedream[.]app

This domain, overview-un-trezor-web.typedream.app, is flagged as an active brand impersonation threat targeting Trezor, a cryptocurrency hardware wallet provider. The site presents itself as an official Trezor login portal, attempting to deceive users into entering sensitive credentials. Analysis indicates the domain is currently active and designed to harvest authentication details from unsuspecting victims. Infrastructure analysis reveals the domain is registered through Typedream and resolves to the IP address 188.114.96.3. It is flagged by 3 of 95 security vendors on VirusTotal, indicating limited but confirmed detection. The page title explicitly mimics Trezor’s branding with the text 'Trezor @Login. The official wallet*', a clear attempt to establish legitimacy. The SSL certificate is issued by Google Trust Services, providing a false sense of security. Additional trust metrics, such as a Gridinsoft trust score of 0/100, further corroborate its malicious intent. No legitimate creation date or historical registration data is available to validate its authenticity. The domain remains active and poses an elevated risk to users unfamiliar with Trezor’s official channels. Organizations and individuals are advised to block access to this domain at the network level and update endpoint protection rules to include the IP address 188.114.96.3. Users should be educated to verify domain authenticity by cross-referencing with Trezor’s official website and to avoid entering credentials on any third-party login pages. Security teams are recommended to monitor for related indicators of compromise, including the domain name and associated IP, and to report any credential exposure incidents for immediate remediation.