faqs-suite-public[.]typedream[.]app

The domain faqs-suite-public.typedream.app is currently under investigation and is flagged for brand impersonation, specifically targeting the Trezor brand. The risk level is currently categorized as under investigation, indicating that while there is no definitive malicious activity confirmed, the domain exhibits suspicious characteristics that warrant further scrutiny.

Infrastructure analysis reveals that the domain faqs-suite-public.typedream.app has not been flagged by VirusTotal, with 0 out of 95 detections. The domain resolves to the IP address 188.114.96.3 and is secured by an SSL certificate issued by Google Trust Services. The page title, 'Trezor.io/Start® | Trezor Suite App (Official) | Trezor®', closely mimics the official Trezor website, which can mislead users into believing they are interacting with a legitimate Trezor service. There is no information available on the registrar, creation date, or presence in blocklists, but the domain's active status and lack of detection may suggest it is relatively new or has not yet been widely reported.

To mitigate the risk of brand impersonation, users are advised to verify the URL of the website they are visiting, ensuring it matches the official Trezor domain (trezor.io). Additionally, users should avoid entering any personal or sensitive information on the site until its legitimacy is confirmed. Security teams should monitor the domain for any suspicious activity and consider adding it to internal threat lists. Collaboration with Trezor's security team is recommended to report and potentially take down the impersonating domain.