# trezor.pt — Recorded domain sale page offering trezor.pt for purchase | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/trezor.pt/ Machine-readable companion: https://phishdestroy.io/domain/trezor.pt/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-11-08 15:23:29 UTC - Selected availability observation: 2026-10-30T18:38:56Z - Stored record updated: 2026-11-08 15:46:36 UTC - VirusTotal detections in the stored snapshot: 15/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: flagged ## Stored labels and detections - Automated brand label (collector metadata; not a confirmed impersonation finding): Trezor ## Stored infrastructure - Observed IP address: 34.117.176.22 - Last stored HTTP status: 307 (observed: not recorded) ## Evidence links - URLScan report: https://urlscan.io/result/01a18e1b-6ecf-702f-b797-aa859ad02936/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/trezor.pt - Certificate Transparency search: https://crt.sh/?q=%25.trezor.pt - Web Archive lookup: https://web.archive.org/web/*/https://trezor.pt/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records trezor.pt as a page presenting the premium domain trezor.pt for sale with buy, lease-to-own, and offer options. On 2026-10-30, trezor.pt displayed a domain sale page branded with a "fruits" logo on a purple gradient background. The page presents "The Premium Domain trezor.pt Is For Sale!" alongside an offer from a verified seller and a Trustpilot rating of 4.4 out of 5. A purchase panel offers three options: Buy Now at €10,000, Lease-to-Own at €447.92 per month, and Make Offer, with a note that the price includes VAT. The stored VirusTotal domain result reports 15 detections out of 92 engines. Bkav reported "malicious"; CRDF reported "malicious". Package revision: 5438ea4bf5af1927118c8a16dfc0630b352cb8999977e2fd970d1a4dfa5dec11 Text generated (not scan time): 2026-11-08 16:33:29 Reviewed evidence snapshot: {"domain":"trezor.pt","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"trezor.pt","final_host":"trezor.pt","redirects":[],"captured_at":"2026-10-30T18:38:56.410000Z","uuid":"01a18e1b-6ecf-702f-b797-aa859ad02936","report_url":"https://urlscan.io/result/01a18e1b-6ecf-702f-b797-aa859ad02936/","sha256":"5ca1fe63800a0f3737bc43845b3813ffd660e4655c460f519a4cce48454997c8","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","virustotal":{"scope":"domain","detections":15,"engines":92,"malicious":14,"suspicious":1,"analysis_date":"2026-11-06","retrieved_date":"2026-11-08","vendor_labels":{"Bkav":"malicious","CRDF":"malicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Gridinsoft":"suspicious","ADMINUSLabs":"malicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Google Safe Browsing":"phishing","Forcepoint ThreatSeeker":"phishing"},"flagging_vendors":["Bkav","CRDF","VIPRE","G-Data","Lionic","Sophos","Webroot","Fortinet","SOCRadar","Gridinsoft","ADMINUSLabs","BitDefender","alphaMountain.ai","Google Safe Browsing","Forcepoint ThreatSeeker"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 15 detections out of 92 engines. Bkav reported \"malicious\"; CRDF reported \"malicious\".","page_paragraph_target_characters":548} Source facts (timestamps as stored): {"record_id":1860463,"first_recorded_at":"2026-11-08 16:23:29","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":15,"denominator":92,"malicious":14,"suspicious":1,"vendors":{"Bkav":"malicious","CRDF":"malicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Gridinsoft":"suspicious","ADMINUSLabs":"malicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Google Safe Browsing":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-11-05T23:34:26Z","checked_at":null,"fetched_at":"2026-11-08T15:26:54Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":15,"denominator":92,"malicious":null,"suspicious":null,"vendors":["ADMINUSLabs","alphaMountain.ai","BitDefender","Bkav","CRDF","Forcepoint ThreatSeeker","Fortinet","G-Data","Google Safe Browsing","Gridinsoft","Lionic","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-11-05 23:34:26","checked_at":"2026-11-08 16:26:55","fetched_at":"2026-11-08 15:26:55","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"Bkav":"malicious","CRDF":"malicious","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Gridinsoft":"suspicious","ADMINUSLabs":"malicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Google Safe Browsing":"phishing","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["Bkav","CRDF","VIPRE","G-Data","Lionic","Sophos","Webroot","Fortinet","SOCRadar","Gridinsoft","ADMINUSLabs","BitDefender","alphaMountain.ai","Google Safe Browsing","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":48,"malicious":14,"suspicious":1,"undetected":29}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"flagged","verdict":1,"checked_at":"2026-11-08 16:28:59"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-08 16:31:11"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"URLScan","record_id":1860463,"scope":"checked_url","observed_at":"2026-10-30T18:38:56Z","http_status":200,"http_observed_at":"2026-10-30T18:38:56Z","stored_http_code":307,"stored_http_observed_at":null,"legacy_site_status":"unknown","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2","scan_uuid":"01a18e1b-6ecf-702f-b797-aa859ad02936","fetched_at":"2026-11-08T15:26:53Z"}} ## Stored page captures - URLScan · 2026-10-30: https://screenshots.phishdestroy.io/us/01a18e1b-6ecf-702f-b797-aa859ad02936.png Captured: 2026-10-30 18:38:56 UTC Source report: https://urlscan.io/result/01a18e1b-6ecf-702f-b797-aa859ad02936/ SHA-256: 5ca1fe63800a0f3737bc43845b3813ffd660e4655c460f519a4cce48454997c8 - URLScan · 2026-01-16: https://screenshots.phishdestroy.io/us/019bc917-3d34-7679-87b3-e24537e71554.png Captured: 2026-01-16 23:15:10 UTC Source report: https://urlscan.io/result/019bc917-3d34-7679-87b3-e24537e71554/ SHA-256: 4d2e6e60f5a01f096d2a4e1a6f01db1b462b67093c5982dfe7f0dfd4a40b5f7f - URLScan · 2026-08-11: https://screenshots.phishdestroy.io/us/019ff224-8545-766f-b7fd-a97bdc3b9b09.png Captured: 2026-08-11 18:45:19 UTC Source report: https://urlscan.io/result/019ff224-8545-766f-b7fd-a97bdc3b9b09/ SHA-256: 2cf64399c8a1b42ba493d405947e8fd1939fb91feb0ec592834aadb4132748b7 - URLScan · 2026-10-17: https://screenshots.phishdestroy.io/us/01a14b84-1a64-733a-ba07-c2e5db301d99.png Captured: 2026-10-17 20:18:42 UTC Source report: https://urlscan.io/result/01a14b84-1a64-733a-ba07-c2e5db301d99/ SHA-256: 3b08fcac188e5a0aab38e8d847e1ac42b4140bcd0c81e6c14f966be2ad000507 - URLScan · 2026-10-18: https://screenshots.phishdestroy.io/us/01a14c84-7cf2-76bf-8ac2-686e978bb5d7.png Captured: 2026-10-18 00:58:45 UTC Source report: https://urlscan.io/result/01a14c84-7cf2-76bf-8ac2-686e978bb5d7/ SHA-256: c571a3bc0f7c1e0c6c9e35bfbff5beb47dbe4f202a038054a900d1844be229cb - URLScan · 2026-10-19: https://screenshots.phishdestroy.io/us/01a151a7-d210-777c-8422-87a9123a26cb.png Captured: 2026-10-19 00:55:25 UTC Source report: https://urlscan.io/result/01a151a7-d210-777c-8422-87a9123a26cb/ SHA-256: d756f1dce16e214809fde99bf106d83672619d6fd03961987e80a71fcc54b74e - URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a170b5-d68e-75fd-a7fc-b50c2f6961c9.png Captured: 2026-10-25 01:38:59 UTC Source report: https://urlscan.io/result/01a170b5-d68e-75fd-a7fc-b50c2f6961c9/ SHA-256: afd69bc679aacdfa0413c4960e4d43a41c1925a9c2a65883b3f3e8322ba85e7c - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/4c06f4de-fd3b-4935-a7a2-0e0efa17c1ee.png Captured: 2026-11-08 15:29:48 UTC Source report: https://radar.cloudflare.com/scan/4c06f4de-fd3b-4935-a7a2-0e0efa17c1ee SHA-256: cc4edf9fba8b372933295d92a39f83a346d62b8d891ce2478e13e8b7570c0d33 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-08T15:26:53Z", "uuid": "01a18e1b-6ecf-702f-b797-aa859ad02936", "scanned_at": "2026-10-30T18:38:56Z", "final_url": "https://trezor.pt/", "status": 200, "ip": "34.117.176.22", "ptr": "22.176.117.34.bc.googleusercontent.com", "domains": [ "static.fruits.co", "www.googletagmanager.com", "analytics.fruits.co" ], "ips": [ "142.251.20.97", "34.107.155.91", "34.117.176.22" ], "asns": [ "15169", "396982" ], "countries": [ "US" ], "link_domains": [ "www.fruits.co", "trustpilot.com" ], "doc_hash": "8e64221059b0df20b7299e465fb3787ace24d554180ee9a34cd487f52a51d0c2", "globals": [ "__next_s", "__next_f", "_sentryDebugIds", "_sentryDebugIdIdentifier", "webpackChunk_N_E", "_N_E", "__SENTRY__", "_sentryRewritesTunnelPath", "SENTRY_RELEASE", "_sentryNextJsVersion", "_sentryRewriteFramesAssetPrefixPath", "_sentryAssetPrefix", "_sentryRouteManifest", "next", "__config", "_N_E_STYLE_LOAD", "FontAwesomeConfig", "___FONT_AWESOME___", "__PosthogExtensions__", "c15tStore", "dataLayer", "toggleDevtools", "google_tag_data", "google_tag_manager" ], "storage_keys": [ "c15t-storage-test-key" ], "tls": { "san": [ "trezor.pt" ], "cipher": "AES_128_GCM", "issuer": "ZeroSSL ECC DV SSL CA 2", "subject": "trezor.pt", "protocol": "TLS 1.3", "valid_to": "2027-01-13T23:59:59Z", "valid_from": "2026-10-15T00:00:00Z" }, "domain_age_days": 3104, "apex_age_days": 3104, "tls_age_days": 15, "tls_valid_days": 90, "requests": 41, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": -69, "malicious": false }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "Google Frontend", "content-type": "text/html; charset=utf-8", "via": "2.0 Caddy", "link": "; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\",