treziostart-cloud-faq[.]framer[.]ai
“Trézor.io/Start® | Getting Started | TreZor® (Official)”
treziostart-cloud-faq.framer.ai — Konten tidak tersedia. Peniruan identitas merek: Trezor; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 2/91 (ChainPatrol, Kaspersky); URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 66/100. Registrar: CSC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of the domain treziostart-cloud-faq.framer.ai indicates it is a brand impersonation scam targeting Trezor, a cryptocurrency hardware wallet provider. The domain was registered on January 6, 2018, and is hosted on IP 31.43.161.6, part of Amazon.com, Inc. (AS16509) in the Netherlands. It is currently offline, returning an HTTP 404 status, but was previously flagged by three security blocklists: PhishDestroy, MetaMask, and SEAL. The page title, 'Trézor.io/Start® | Getting Started | TreZor® (Official)', explicitly mimics Trezor’s official onboarding portal, confirming the impersonation intent.
The domain was registered through CSC Corporate Domains, Inc., and uses AWS nameservers (ns-114.awsdns-14.com, ns-1198.awsdns-21.org, ns-1902.awsdns-45.co.uk, ns-635.awsdns). SSL is provided by Let’s Encrypt (serial E8), and detected technologies include Framer Sites, React, HSTS, and HTTP/3. Gridinsoft assigned a trust score of 0/100. Two of 91 security vendors on VirusTotal flagged the domain at the time of scanning.
Defenders should treat this domain as high-risk due to its confirmed presence on multiple blocklists, explicit brand impersonation, and use of a hosting provider commonly exploited for phishing. While the domain is currently offline, historical DNS records should be reviewed for past resolutions, and any residual DNS cache or proxy references should be purged. Monitoring for re-activation or similar domains using the same infrastructure (e.g., Framer Sites, AWS nameservers) is recommended. No evidence of active malicious content is present at this time, but the domain’s prior classification as a scam warrants continued caution.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 4 identified
Framer is a no-code web design platform for designing and publishing responsive websites.
www.framer.com Keyakinan 100%React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org Keyakinan 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti & Laporan Eksternal
PD-20260621-4AEFC5 Recipient: abuse@framer.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive