trezor-io-strtt[.]framer[.]ai

This report analyzes the domain trezor-io-strtt.framer.ai, which was identified as an impersonation site targeting the Trezor brand. The page title, "Starting Up Your Device | Trezor," indicates the site poses as an official Trezor resource, likely attempting to deceive users into entering sensitive information or downloading malicious software related to cryptocurrency hardware wallet setup. The threat is that visitors may believe they are interacting with a legitimate Trezor platform, potentially leading to credential theft or financial loss.

Technical analysis reveals the domain was flagged by 4 out of 95 VirusTotal vendors and is listed on 3 blocklists. The IP address 31.43.161.6 is located in the Netherlands and is associated with AS16509 Amazon.com, Inc. The domain was registered on 2018-01-06 through CSC Corporate Domains, Inc. The SSL certificate is issued by Let's Encrypt with identifier E8. Nameservers include ns-114.awsdns-14.com, ns-1198.awsdns-21.org, ns-1902.awsdns-45.co.uk, and ns-635.awsdns.

As of the latest check, the site is DOWN/OFFLINE. The GridinSoft trust score is 0 out of 100, indicating high distrust, and the DOM risk score is 68, reflecting a significant threat level. Although currently inaccessible, the domain remains a risk due to its impersonation nature and potential reactivation.