tre-zor-io-sso-public[.]typedream[.]app

This domain is flagged for high-risk brand impersonation targeting Trezor hardware wallet users. The site presents itself as an official setup portal for Trezor devices, displaying the page title 'Get Started with Trezor | Setup Your Trezor Hardware Wallet.' Users who interact with this page risk credential theft, seed phrase exposure, or unauthorized access to cryptocurrency wallets, potentially leading to asset loss. Analysis indicates the domain is hosted on Typedream infrastructure and resolves to IP address 188.114.97.3. It holds a valid SSL certificate issued by Google Trust Services, which may lend false legitimacy to unsuspecting visitors. VirusTotal detection shows 2 out of 95 security vendors have flagged the domain as malicious, suggesting early-stage detection of a targeted threat. The domain remains active as of this report, with no evidence of takedown or mitigation. Users who visited this domain should immediately revoke any wallet connections or permissions granted. If credentials or seed phrases were entered, affected wallets must be considered compromised. Transfer remaining assets to a new, secure wallet using a verified Trezor device and official software. Monitor connected accounts for unauthorized transactions and enable multi-factor authentication where possible. Report the domain to security teams at Trezor and the hosting provider, Typedream, to support takedown efforts.