web-suite-trezoor-docs[.]typedream[.]app
“Trézór Suite® (Official) | Web Crypto® Management”
web-suite-trezoor-docs.typedream.app — 内容不可用. 品牌冒充:Sui; 诈骗类型:Brand Impersonation. 证据摘要: VirusTotal 12/91 (ChainPatrol, alphaMountain.ai, CyRadar, Emsisoft, Forcepoint ThreatSeeker); URLQuery 2 alerts; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 86/100. 注册商: Typedream.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain, web-suite-trezoor-docs.typedream.app, is identified as an active cryptocurrency wallet phishing site. Analysis confirms it impersonates the official interface of a well-known hardware wallet provider, presenting itself as a web-based crypto management platform. The page title, 'Trézór Suite® (Official) | Web Crypto® Management,' explicitly mimics the branding of the legitimate service to deceive users into entering sensitive credentials or recovery phrases. Infrastructure analysis reveals the domain is flagged by 5 of 95 security vendors on VirusTotal, indicating a moderate but confirmed detection rate. The domain resolves to the IP address 188.114.96.3, and its SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy to unsuspecting users. No historical registration data is publicly available for this subdomain, suggesting it may have been recently deployed or obscured to evade tracking. The absence of widespread blocklisting does not diminish the risk, as phishing campaigns often exploit newly registered or low-visibility infrastructure to bypass initial detection. Current status confirms the domain remains active and accessible, posing an ongoing threat to users seeking crypto wallet management tools. Organizations and individuals are advised to block access to this domain at the network level and update endpoint protection rules to include the IP address 188.114.96.3. Users who may have interacted with this domain should immediately revoke any session tokens, reset credentials, and monitor associated accounts for unauthorized transactions. Security teams are encouraged to correlate this domain with other indicators of compromise, particularly those targeting cryptocurrency infrastructure, and share findings with relevant threat intelligence communities.
网络安全情报
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 11 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 置信度 100%React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 置信度 100%Next.js is a React framework for developing single page Javascript applications.
nextjs.org 置信度 100%Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.
cloud.google.com 置信度 100%Cloud CDN uses Google's global edge network to serve content closer to users.
cloud.google.com 置信度 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 置信度 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 置信度 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 置信度 100%VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of web-suite-trezoor-docs.typedream.app · checked Jun 28, 2026
网站配置分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。