Lompat ke laporan keamanan
Checked 09/08/2026 Ref AC160D8B

MALICIOUS — CRITICAL

Trezor.com.im Brand Impersonation Warning

trezor[.]com[.]im

Analysis of the domain trezor.com.im shows it was registered on 2026-06-08 and currently resolves to the IPv4 address 156.226.126.21, hosted in Hong Kong by CloudFly Net Inc.

100/100 evidence score · Critical
VirusTotal
19/91
Blocklists
2 · MetaMask, SEAL
Ketersediaan
Terakhir diketahui aktif · HTTP 200
Report / Add Evidence Appeal this listing
No capture stored

Do not enter credentials, seed phrases, payment details, or personal information on this domain.

⚠️
Domain ini telah ditandai sebagai berbahaya
Mesin keamanan melaporkan deteksi: 19. Daftar blokir publik yang melaporkan kecocokan: 2. Berhati-hatilah — jangan memasukkan kredensial atau informasi pribadi.
Jump to section
Ringkasan laporan

trezor.com.im — Terakhir diketahui aktif (HTTP 200). Peniruan identitas merek: Trezor; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 19/91 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, Chong Lua Dao); Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 100/100.

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Evidence Analysis

Stored AI analysis · 13/07/2026

Ref AC160D8B

Analysis of the domain trezor.com.im shows it was registered on 2026-06-08 and currently resolves to the IPv4 address 156.226.126.21, hosted in Hong Kong by CloudFly Net Inc. The site presents a valid TLS certificate issued by Let’s Encrypt (R12), and HTTP requests return status code 200. The page title returned by the server is a garbled string containing “Trezor” and Chinese characters, indicating an attempt to masquerade as the official Trezor brand. VirusTotal records indicate that 18 of 91 scanners flag the domain, and the domain appears in four AlienVault OTX pulses and three independent blocklists. It is actively blocked by PhishDestroy, MetaMask, and SEAL, and receives a Gridinsoft trust score of 0 / 100, reinforcing its malicious classification as a high‑risk brand‑impersonation campaign targeting Trezor users. The evidence confirms active infrastructure but provides no additional details on the phishing page content or credential collection mechanisms. Defenders should add the domain and its resolving IP to blocklists, enforce TLS inspection, and monitor for related traffic, while threat‑intel teams may query the associated blocklists for indicators of compromise and investigate any observed connections to the HK host.

Stored source results

Recorded verdicts and infrastructure observations for this domain.

VirusTotal
VirusTotal
19 det.
OTX references
4 community refs
Sertifikat TLS
Kedaluwarsa atau belum diverifikasi -12d
Usia
2 mo New
Status terpantau
Terakhir diketahui aktif 200
PhishDestroy
Daftar Hapus
Terdaftar
Cakupan data12 recorded checks
VirusTotal 19 / 91 URLQuery tidak diperiksa PhishStats tidak diperiksa OTX 4 community references CF Radar no data URLScan capture not submitted URLScan verdict putusan tidak tersedia Pemblokiran DNS tidak diperiksa TLS Kedaluwarsa atau belum diverifikasi WHOIS 2 mo old Tangkapan layar belum terekam Rantai pengalihan tidak diselidiki

Alur Tanggapan Ancaman Pipeline

Penemuan
Checks
Reports
Ketersediaan
8/10
Ancaman Telah Diterima
trezor.com.im telah terdeteksi dan dimasukkan ke dalam antrian untuk analisis menyeluruh
15/06/2026
VirusTotal
19/91 recorded on VirusTotal
28/07/2026
Google Safe Browsing
09/06/2026
Deteksi Daftar Blokir
Ditemukan di 2 blocklists: MetaMask, SEAL
09/08/2026
OTX Community References
4 community publication references on AlienVault OTX. References are not vendor verdicts and are excluded from the evidence score.
09/06/2026
Brand Impersonation
Impersonation of Trezor
Technical Analysis Recorded
Laporan tersebut berisi teknologi tersimpan atau hasil analisis forensik.
09/08/2026
Complaint Draft Available
Tidak ada penyerahan yang dicatat. Anda dapat membuat draf, meninjaunya, dan menyerahkannya sendiri ke otoritas yang sesuai.
Daftar yang Dihapus Telah Dipublikasikan
15/06/2026
Monitoring Continues
Domain tetap dapat dijangkau atau aksesnya dibatasi; pemeriksaan di masa depan dapat memperbarui pengamatan ini.

Status Daftar Blokir Publik

Intelijen Domain

Domain
Server / ASN Apache · AS135097 LUOGELANG (FRANCE) LIMITED
Reputasi IP abuse score 0/100 0 reports checked 13/07/2026
Alamat IP 156.226.126.21 HK
LokasiHK Hong Kong, HK
JaringanAS135097 · CloudFly Net Inc
IP terbalikviewdns.info → rapiddns.io →
PendaftaranDibuat 08/06/2026 (61d · New)
Status HTTP200
Rincian teknisDNS, SAN SSL, cap waktu
Pertama Kali Terdeteksi15/06/2026
TLS Fingerprint
TLS Observationvalid from 30/04/2026scanned 13/06/2026
TLS SAN Domainswww.trezor.com.im
Favicon Hash
Laporkan Domain Ini Kirimkan bukti & bantu lindungi orang lain

Analisis VirusTotal

19 / Vendor keamanan 91 menandai domain ini
View on VT
Last analyzed Previous stored snapshot: 18 detections
ADMINUSLabs
ChainPatrol
alphaMountain.ai
BitDefender
Chong Lua Dao
CRDF
CyRadar
ESET
Emsisoft
Forcepoint ThreatSeeker
Fortinet
G-Data
Gridinsoft
Kaspersky
Lionic
Netcraft
SOCRadar
Sophos
VIPRE
Bukti & Laporan EksternalIndependent lookups and source reports
Analisis Keamanan
VirusTotal 19 det. ChainPatrol ChainAbuse 1 report URLQuery Open lookup Gridinsoft SSL Laboratorium Expired/unverified OTX 4 refs WOT ScamAdviser Pemeriksa Daftar Hitam URLVoid Sucuri SiteCheck Observatorium MDN
Third-Party Detection — ChainAbuse
1 report filed for trezor.com.im · category: Phishing · source checked
Flagged by PhishFort Detection System on May 1, 2026 — automated submission, not a user testimony. Source: ChainAbuse (TRM Labs).
OSINT & Intelijen
Web-Check Full scan SOCRadar Dark web report LeakIX Leak search Shodan Censys ThreatFox Batu Hudson Sign-in search IntelX crt.sh Sertifikat WHOIS Wayback
DNS & Jaringan
nslookup.io DNS bgp.tools ASN /Rute
SEO & Domain
SpyFu Moz DA/PA Ahrefs Tautan balik Analisis Mendalam
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.

Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.

Europol
Temukan saluran pelaporan resmi untuk negara UE Anda
National police directory
PhishDestroy listing review Bukan laporan penegakan hukum
Banding atas Nama Domain
Minta peninjauan jika Anda pemilik domain ini dan yakin cantumannya salah
Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →

Laporkan kepada Pihak Berwenang di Daerah Anda

Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.

Direktori 97 negara
Draf yang dibantu AI — detail insiden diproses oleh penyedia AI Tinjau dan kirimkan sendiri
Sematkan Laporan IniRead-only HTML widget
HTML · IFRAME

Sematkan Laporan Ini

Bagikan informasi ancaman ini di situs web atau blog Anda

embed.html 
<iframe
  src="https://phishdestroy.io/id/embed/domain/trezor.com.im"
  title="PhishDestroy threat report for trezor.com.im"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>