suite-app-trzor-web[.]typedream[.]app

This domain is a high-risk crypto drainer phishing site designed to impersonate the official Trézór Suite platform. Visitors are presented with a fraudulent login interface mimicking the legitimate crypto management service, where any entered credentials or wallet connections are immediately captured by attackers. The site is engineered to drain cryptocurrency assets from connected wallets, often executing unauthorized transactions without user consent. The use of brand impersonation and urgency-driven prompts increases the likelihood of successful exploitation, particularly targeting users seeking to manage or secure their digital assets. Analysis indicates the domain is registered through Typedream, a platform that allows rapid deployment of web applications, and resolves to the IP address 188.114.97.3. The SSL certificate is issued by Google Trust Services, providing a false sense of security. As of the latest scan, the domain is flagged by 3 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. It appears on three security blocklists and is actively blocked by multiple threat intelligence feeds, including those maintained by browser extensions and security providers. The page title, "Trézór Suite (en-Us) | Desktop & Web Crypto® Management™," closely mirrors the legitimate service, further enhancing its deceptive appearance. If you have visited suite-app-trzor-web.typedream.app or entered any sensitive information, immediately disconnect any connected wallets and cease all interactions with the site. Revoke any wallet permissions granted to unknown or suspicious applications through your wallet’s settings. Conduct a full scan of your device for malware, as phishing sites may deploy additional payloads. Monitor all connected accounts and wallets for unauthorized transactions, and report any suspicious activity to your wallet provider or exchange. Consider using hardware wallets for enhanced security and enable multi-factor authentication where available. Users are advised to verify domain authenticity by cross-referencing official sources before entering credentials or connecting wallets.