trezrr-faq-help[.]typedream[.]app

The domain trezrr-faq-help.typedream.app, now offline, was used in a phishing campaign targeting Trezor users. It was detected by PhishDestroy on June 20, 2026, and has since been flagged by 5 out of 91 vendors on VirusTotal. This domain was also included in public blocklists by PhishDestroy, MetaMask, and SEAL, indicating its malicious nature.

Registered through Typedream and hosted on an IP managed by Cloudflare (AS13335) in the US, the domain exploited its SSL certificate issued by Google Trust Services to appear legitimate. The phishing operation likely aimed to deceive users into providing sensitive information by mimicking Trezor's support pages. The platform risk score of 90/100 further underscores the threat level posed by this domain.

Despite being taken down, the domain's initial lack of widespread detection highlights the critical window between domain registration and antivirus database updates. PhishDestroy's early detection capabilities identify threats during this vulnerable period, ensuring that such domains are flagged before they can cause significant harm. The inclusion of this domain in multiple blocklists reflects the collaborative efforts to mitigate phishing threats effectively.