larn-start-trezr[.]typedream[.]app
“Trezor @Login. The official wallet”
larn-start-trezr.typedream.app — 内容不可用. 品牌冒充:Trezor; 诈骗类型:Credential Phishing. 证据摘要: VirusTotal 16/91 (ChainPatrol, alphaMountain.ai, BitDefender, CyRadar, ESET); URLQuery 3 alerts; URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 95/100. 注册商: Typedream.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain, larn-start-trezr.typedream.app, is flagged as a generic phishing threat under active investigation. Analysis indicates it impersonates a startup or business portal, likely designed to harvest credentials or distribute malicious payloads under the guise of legitimate service onboarding. No specific brand impersonation or crypto drainer kit signatures have been confirmed at this stage, though the domain structure suggests a broad-targeting approach rather than a narrowly focused campaign. Infrastructure analysis reveals the following technical indicators: the domain currently resolves to IP address 188.114.97.3, which is associated with a content delivery network known for hosting both legitimate and malicious content. VirusTotal detection remains at 0/95 engines, indicating no antivirus or security vendor has flagged the domain as malicious at the time of this report. The domain is registered through Typedream, a platform that provides no-code website hosting, which has been previously abused for phishing operations due to its ease of deployment and lack of stringent content review. No creation date is publicly available, and Google Safe Browsing (GSB) has not listed the domain as unsafe. Blocklist monitoring services report zero listings across major threat intelligence feeds. Current status remains active, with no takedown or sinkholing actions observed. The domain continues to resolve and serve content, posing an ongoing risk to users who may encounter it through phishing emails, social engineering, or malvertising. Response actions are pending further analysis of hosted content and payload behavior. Users are advised to block the domain at the network level and treat any interaction with it as suspicious. Organizations should monitor for connections to 188.114.97.3 and the domain itself in proxy logs, and implement real-time URL filtering to prevent access. No user credentials or sensitive data should be entered on this domain or any subdomains under typedream.app until further notice.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | larn-start-trezr.typedream.app |
malicious | Sinkholed |
| OpenDNS | larn-start-trezr.typedream.app |
phishing | Phishing Block |
| Quad9 DNS | larn-start-trezr.typedream.app |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 9 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 置信度 100%React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 置信度 100%Next.js is a React framework for developing single page Javascript applications.
nextjs.org 置信度 100%Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.
cloud.google.com 置信度 100%Cloud CDN uses Google's global edge network to serve content closer to users.
cloud.google.com 置信度 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 置信度 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 置信度 100%VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。