sso-trezor-io-en[.]typedream[.]app

The domain sso-trezor-io-en.typedream.app has been identified as a high-risk brand impersonation threat, specifically targeting users of Trezor. The website attempted to mimic a legitimate Trezor login page to deceive users into providing their credentials, potentially leading to unauthorized access to their accounts and sensitive data. This kind of phishing attack exploits trust in a well-known brand, making it a significant threat to user security.

This domain is flagged by 19 out of 95 security vendors on VirusTotal, indicating a broad consensus about its malicious intent. The domain was created on June 15, 2026, and was registered through Typedream. It has been blocked by several security solutions, including PhishDestroy and MetaMask, and appears on three security blocklists. The page title found, 'Log In | Trezor® | Sign In to Your Account* - en-trezor-io-login', further confirms the intent to impersonate Trezor. The domain resolves to IP address 188.114.97.3 and utilized an SSL certificate issued by Google Trust Services, which can often lend false legitimacy to the site.

If you visited this domain, it is crucial to take immediate steps to secure your accounts. Begin by changing your Trezor account password and any other accounts using the same credentials. Monitor your accounts for any unauthorized activities and consider enabling two-factor authentication if not already done. It is advisable to run a security scan on your device to check for malware that might have been inadvertently downloaded. Finally, report the incident to Trezor and relevant authorities to help mitigate the threat and protect other users. It is essential to remain vigilant and cautious of unexpected login requests from domains that do not match the official ones.