started-trezrs[.]zapier[.]app
“Official® | Trézor.io/Start®”
started-trezrs.zapier.app — ढका हुआ · पहुंच योग्य. ब्रांड प्रतिरूपण: Trezor; घोटाले का प्रकार: Brand Impersonation. साक्ष्य सारांश: VirusTotal 18 detections (engine total unavailable) (Criminal IP, alphaMountain.ai, Chong Lua Dao, Cluster25, CRDF); URLQuery 4 alerts; URLScan malicious verdict; CF Radar malicious; cloaking observed; PhishDestroy score 100/100. रजिस्ट्रार: Name.com.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
started-trezrs.zapier.app is an active crypto drainer phishing domain impersonating Trezor wallet login interfaces to steal cryptocurrency assets. This domain resolves to IP 64.239.109.1 and leverages a Let's Encrypt SSL certificate to appear legitimate, tricking users into entering seed phrases or private keys. The infrastructure is designed to harvest sensitive credentials and drain connected wallets immediately upon submission. PhishDestroy identifies this domain as part of a growing campaign targeting cryptocurrency users through deceptive redirection and spoofed interfaces.
This domain was flagged by PhishingArmy and OISD, two reputable threat intelligence blocklists, indicating confirmed malicious activity. According to VirusTotal analysis, 18 out of 95 security vendors have detected this domain as malicious. The domain is registered under the Zapier.app subdomain, likely leveraging Zapier’s trusted domain reputation to bypass initial scrutiny. While the exact creation date is not provided, the combination of active phishing behavior, multiple blocklist detections, and low detection coverage (only 18/95) suggests a recently deployed or evasive campaign. The use of a legitimate SSL certificate further increases the risk of successful user deception, as victims may overlook security warnings.
Users who have visited started-trezrs.zapier.app should immediately assume their credentials or seed phrases may have been compromised. If any cryptocurrency wallet credentials were entered on this site, users must transfer remaining funds to a new wallet with a fresh seed phrase immediately. Enable two-factor authentication on all associated accounts and monitor for unauthorized transactions. Run a full antivirus scan and consider revoking any API keys or permissions granted to suspicious domains. For further verification, users can check this domain’s status on PhishDestroy before interacting with it again.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | started-trezrs.zapier.app |
malicious | Sinkholed |
| OpenDNS | started-trezrs.zapier.app |
phishing | Phishing Block |
| DNS4EU | started-trezrs.zapier.app |
malicious | Sinkholed |
| Hagezi Threat Feed | started-trezrs.zapier.app |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
Registration: zapier.app
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain zapier.app behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 6 identified
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.
aws.amazon.com 100% विश्वासStripe offers online payment processing for internet businesses as well as fraud prevention, invoicing and subscription management.
stripe.com 100% विश्वासreCAPTCHA is a free service from Google that helps protect websites from spam and abuse.
www.google.com 100% विश्वासHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% विश्वासAmazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.
aws.amazon.com 100% विश्वासवायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of started-trezrs.zapier.app · checked May 4, 2026
साइट कॉन्फ़िगरेशन विश्लेषण
साक्ष्य और बाहरी रिपोर्टें
PD-20260504-322050 Recipient: abuse@vercel.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।