trezor-login-us-en[.]typedream[.]app

This domain, trezor-login-us-en.typedream.app, poses a high risk of brand impersonation, specifically targeting users of the Trezor brand. The threat involves a deceptive login page designed to mimic the official Trezor login, with the intention of harvesting user credentials and potentially conducting further malicious activities.

Analysis indicates that the domain has been flagged by 19 out of 95 security vendors on VirusTotal, highlighting the significant risk it poses. The domain was registered through Typedream on June 15, 2026, and resolves to the IP address 188.114.97.3. Additionally, the SSL certificate is issued by Google Trust Services, which may lend an air of legitimacy to unsuspecting users. This domain appears on three security blocklists, and is blocked by PhishDestroy, MetaMask, and SEAL, indicating a coordinated effort to mitigate the threat.

If users have visited this domain, they are advised to immediately change their Trezor login credentials and monitor their accounts for any unauthorized activity. It is also recommended to run a full security scan on any devices used to access the domain, and to report the incident to Trezor's official support channels. Users should remain vigilant and verify the authenticity of web pages by checking the URL and SSL certificate before entering sensitive information.