io-trezorr-public[.]typedream[.]app

This domain has been flagged as a high-risk brand impersonation site targeting Trezor, a popular cryptocurrency hardware wallet. The site masquerades as the official Trezor login portal, aiming to harvest users' recovery phrases and private keys. PhishDestroy identified this threat through its active status and the deceptive page title 'Trézor @Login. The official wallet* | Trézor®', which mimics legitimate branding.

Technical indicators are alarming: VirusTotal reports 13 out of 95 security vendors flagging this domain as malicious. It resolves to IP address 188.114.96.3 and uses an SSL certificate issued by Google Trust Services (WE1), which adds a false layer of trust. The domain is currently active and appears on three security blocklists. No creation date or registrar information was provided, but the combination of low trust scores and widespread vendor detection confirms its malicious nature.

Users who encounter this domain should never enter any sensitive information, as doing so could lead to the theft of cryptocurrency assets. Immediately close the page and verify any Trezor-related communications through official channels. Report the domain to your security team and consider adding it to your blocklist. Always double-check URLs and enable two-factor authentication on your accounts to mitigate such threats.