overview-en-treezorlogin-web[.]typedream[.]app

This domain, overview-en-treezorlogin-web.typedream.app, poses a high-risk credential phishing threat targeting users of the Trezor hardware wallet. The page mimics the official Trezor login interface, presenting itself as "Trezor @Login. The official wallet" to deceive victims into entering sensitive credentials, including recovery seeds or private keys. Analysis indicates the site is designed to harvest authentication details, which could lead to unauthorized access to cryptocurrency wallets and subsequent asset theft. The threat is particularly dangerous for users unfamiliar with phishing tactics or those who do not verify domain authenticity before entering credentials. Infrastructure analysis reveals the domain is registered through Typedream, a platform often abused for rapid deployment of phishing pages. It currently resolves to the IP address 188.114.96.3, with VirusTotal reporting 2 out of 95 security vendors flagging the domain as malicious. Despite the low detection rate, the active status and targeted impersonation of a well-known cryptocurrency wallet brand elevate the risk. No creation date is provided, but the domain remains operational, indicating ongoing malicious activity. The lack of widespread blocklisting suggests the campaign may still be in its early stages or evading detection through obfuscation techniques. Users who have visited overview-en-treezorlogin-web.typedream.app or entered credentials on the site should immediately revoke access to any associated wallets and transfer assets to a new, secure wallet. Change all passwords and recovery phrases linked to the compromised credentials, and monitor accounts for unauthorized transactions. Enable multi-factor authentication where available, and report the incident to the legitimate service provider for further investigation. Security teams should block the domain and IP address 188.114.96.3 at the network level to prevent further exposure. Regularly update detection rules to include emerging indicators associated with this campaign.