help-treezor-suite-cdn[.]typedream[.]app
“Trézor Suite® (Official) | Desktop & Web Crypto® Management”
help-treezor-suite-cdn.typedream.app — Konten tidak tersedia. Peniruan identitas merek: Sui; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 13/91 (ChainPatrol, alphaMountain.ai, CyRadar, ESET, Emsisoft); URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 89/100. Registrar: Typedream.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain help-treezor-suite-cdn.typedream.app was observed hosting a brand‑impersonation page that masquerades as the Sui ecosystem, as indicated by the page title “Trézor Suite® (Official) | Desktop & Web Crypto® Management”. The site was registered through Typedream and served content via a Cloudflare edge node (IP 172.67.206.36, ASN 13335, United States). TLS termination was provided by Google Trust Services using the WE1 certificate chain, and the HTTP response returned a 403 status code, suggesting the site was taken offline at the time of analysis. Infrastructure fingerprints show a stack built on Node.js, React, Next.js, Google Cloud services (including Cloud Trace and Cloud CDN), and Webpack, all delivered through Cloudflare’s CDN.
The domain appears on three public security blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL, reinforcing the high‑risk classification. VirusTotal scans flagged the domain in 13 of 91 vendor engines, providing additional independent confirmation of malicious intent. While the exact phishing page content cannot be verified because the site is currently inaccessible, the combination of brand‑impersonation cues, the technical stack, and the multi‑vendor detections constitute strong evidence of a targeted credential‑ harvesting or crypto‑related scam aimed at Sui users.
Defenders should continue to block the domain at perimeter filters, update DNS‑based blocklists with the observed IP and hostname, and monitor for any re‑hosting attempts that may reuse the same infrastructure or page title. Incident response teams should also scrutinize outbound traffic to Cloudflare and Google Cloud endpoints originating from internal assets, as compromised credentials could be leveraged to access similar services. Because the site is offline, ongoing observation is warranted to detect potential re‑activation or migration to new domains.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 9 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org Keyakinan 100%React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org Keyakinan 100%Next.js is a React framework for developing single page Javascript applications.
nextjs.org Keyakinan 100%Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.
cloud.google.com Keyakinan 100%Cloud CDN uses Google's global edge network to serve content closer to users.
cloud.google.com Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Analisis Konfigurasi Situs
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive