info-trezoor-suite-cdn[.]typedream[.]app

This domain mimics the official Trezor hardware wallet interface, presenting itself as a legitimate portal for managing cryptocurrency assets. Analysis indicates it is a fraudulent site designed to harvest wallet credentials or seed phrases, enabling attackers to drain funds from unsuspecting users. The page title explicitly claims affiliation with Trezor, using official branding and a deceptive URL structure to appear authentic. Infrastructure analysis reveals multiple red flags confirming malicious intent. The domain is registered through Typedream, a platform not associated with Trezor, and resolves to the IP address 188.114.96.3. It is detected by 20 out of 95 security vendors on VirusTotal, with active listings on three security blocklists. The site employs Google Trust Services for SSL certification, a common tactic to feign legitimacy, while underlying technologies include Node.js, React, and Cloudflare, typical of modern phishing frameworks. Users who visited this domain should assume their wallet credentials or recovery phrases may have been compromised. Immediately disconnect any connected wallets and cease all interactions with the site. Transfer remaining assets to a new, secure wallet address and monitor all linked accounts for unauthorized transactions. Enable multi-factor authentication on all cryptocurrency-related services and report the domain to relevant security teams for further investigation.