web-tr-z-r-suite-app-en-us[.]typedream[.]app

This domain is flagged as a crypto wallet drainer targeting users of the Trézór hardware wallet platform. Analysis indicates the site mimics the official Trézór Suite interface, presenting itself as the legitimate "Trézór Suite App (Official)" with a congratulatory message for new device owners. The intent is to deceive victims into entering recovery phrases or private keys, enabling attackers to drain cryptocurrency assets from connected wallets. The page title and branding closely replicate the authentic Trézór experience, increasing the likelihood of successful exploitation among less vigilant users. Infrastructure analysis reveals the domain web-tr-z-r-suite-app-en-us.typedream.app resolves to IP address 188.114.96.3 and is hosted on a platform known for rapid deployment of phishing pages. VirusTotal detection shows 2 out of 95 security vendors have flagged this domain as malicious, a low but non-zero signal that aligns with newly registered or evasive infrastructure. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy. No historical WHOIS data is publicly available due to the domain being registered through a privacy-protected service, and no blocklist entries were found in major threat intelligence feeds at the time of analysis. Users who visited this domain and entered sensitive information such as recovery seeds, private keys, or wallet passwords should immediately transfer all cryptocurrency assets to a new, secure wallet. Disconnect any hardware devices associated with the compromised credentials and generate new recovery phrases. Monitor connected accounts for unauthorized transactions and report the incident to relevant security teams or wallet providers. Browser sessions should be cleared, and any downloaded files or extensions from the domain deleted. Consider revoking access to any decentralized applications (dApps) previously authorized through the compromised wallet to prevent further exploitation.