trezor49[.]vip
“exchange”
trezor49.vip — असत्यापित. ब्रांड प्रतिरूपण: Trezor; घोटाले का प्रकार: Crypto Scam. साक्ष्य सारांश: VirusTotal 3/94 (alphaMountain.ai, Ermes, Fortinet); URLQuery 4 alerts; Spamhaus DBL_SPAM; PhishDestroy score 69/100. रजिस्ट्रार: Gname.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
This domain, www.trezor49.vip, is identified as cryptocurrency wallet phishing infrastructure targeting Trezor, a hardware wallet provider. The site is currently offline, though prior analysis confirms its role in brand impersonation designed to deceive users into divulging sensitive credentials or financial information. The domain was operational long enough to be assessed and subsequently blocked by security mechanisms. Analysis of the domain reveals multiple technical indicators of malicious intent. The domain was registered on March 7, 2026, through Gname.com Pte. Ltd., and resolved to the IP address 202.95.1.30. Security vendors flagged the domain in 13 of 95 VirusTotal scans, placing it on one security blocklist. The site employed a Let's Encrypt SSL certificate and utilized technologies such as amCharts, Bootstrap, Vue.js, Nginx, Cloudflare, Swiper, jQuery, and HSTS. A Gridinsoft trust score of 0/100 further corroborates its classification as high-risk infrastructure. The domain is currently offline, but its prior activity warrants continued monitoring. Organizations and individuals are advised to block the domain and associated IP address at the network level. Users who may have interacted with the site should immediately revoke any credentials or recovery phrases entered, monitor financial accounts for unauthorized activity, and consider hardware wallet integrity checks. Security teams should update detection rules to include this domain and its indicators of compromise in threat intelligence feeds.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | www.trezor49.vip |
malicious | Sinkholed |
| Hagezi Threat Feed | ht.trezor49.vip |
malicious | Sinkholed |
| Hagezi Threat Feed | admin.trezor82.cz |
malicious | Sinkholed |
| DNS4EU | admin.trezor82.cz |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 10 identified
amCharts is a JavaScript-based interactive charts and maps programming library and tool.
amcharts.com 100% विश्वासBootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com 100% विश्वासVue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.
vuejs.org 100% विश्वासNginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100% विश्वासCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासSwiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.
swiperjs.com 100% विश्वासjQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 100% विश्वासHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% विश्वासPopper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.
popper.js.org 100% विश्वासवायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साक्ष्य और बाहरी रिपोर्टें
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।