public-start-treozr[.]typedream[.]app

The domain public-start-treozr.typedream.app is currently active and is identified as a credential theft phishing site impersonating Trézor.io. This domain poses a high risk to users who may inadvertently provide sensitive information, such as login credentials, to this malicious site.

Analysis indicates that the domain public-start-treozr.typedream.app is flagged by 3 of 95 security vendors on VirusTotal, suggesting a low but significant level of suspicion. The SSL certificate is issued by Google Trust Services, which may lend a false sense of security to unsuspecting users. The domain resolves to the IP address 188.114.96.3. No specific registrar information is available, and the creation date of the domain is not provided. However, the use of a reputable SSL certificate and a title that closely mimics the legitimate Trézor.io site, 'Trézor.io/Start® | Starting Up Your Device - Trézor®', indicates a sophisticated attempt to deceive users.

Given the current active status of the domain, immediate action is recommended to mitigate potential risks. Users should avoid interacting with this domain and report any suspicious activity to their security teams. Network administrators are advised to block this domain and its associated IP address to prevent access. Regular monitoring and updates to blocklists are essential to ensure ongoing protection against evolving threats.