trezursuite-io[.]created[.]app
“Homepage”
trezursuite-io.created.app — Contenu indisponible. Usurpation de l'identité de la marque : Trezor; Type d'arnaque : Crypto Scam. Résumé des preuves: VirusTotal 7/95 (ADMINUSLabs, alphaMountain.ai, CyRadar, Ermes, ESET); URLScan malicious verdict; Spamhaus DBL_PHISH; PhishDestroy score 71/100. Bureau d’enregistrement: Tucows.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
The domain trezursuite-io.created.app is a brand impersonation scam targeting the Trezor cryptocurrency hardware wallet brand. It poses a significant risk as an elevated threat and has been taken offline. The site was observed to impersonate Trezor, potentially tricking users into divulging sensitive information or performing actions that could compromise their cryptocurrency holdings.
The domain was registered through Tucows Domains Inc. on July 12, 2023. It resolves to the IP address 216.150.16.1, which is located in the US and is part of AS16509 Amazon.com, Inc. The SSL certificate for trezursuite-io.created.app was issued by Let's Encrypt / R13. According to VirusTotal, 7 of 95 security vendors, including ADMINUSLabs, alphaMountain.ai, and CyRadar, have flagged this domain as malicious. The site appears on 1 security blocklist, specifically PhishDestroy, but it has not been flagged by Google Safe Browsing. The page title observed was 'Homepage', and the domain uses Vercel and HSTS technologies. The current HTTP status is 404, indicating the site is no longer active.
Users who may have interacted with trezursuite-io.created.app should take immediate steps to protect their cryptocurrency assets. If the site was used to perform any transactions or approve tokens, users should revoke token approvals and move their funds to a new, secure wallet. For those who may have entered login credentials, it is crucial to change passwords immediately, enable two-factor authentication, and monitor accounts for any unauthorized activity. To report this phishing domain, users can submit it to PhishDestroy or other relevant security organizations for further analysis and action.
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Registration: created.app
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain created.app behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 2 identified
Vercel is a cloud platform for static frontends and serverless functions.
vercel.com Confiance à 100 %HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confiance à 100 %Analyse VirusTotal
Preuves archivées
Données factuelles et rapports externes
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif