trezor[.]io-app-web-suite[.]com
“Bot Verification”
trezor.io-app-web-suite.com — Belum terverifikasi. Peniruan identitas merek: Trezor; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 6/95 (alphaMountain.ai, CRDF, CyRadar, Fortinet, Gridinsoft); PhishDestroy score 68/100. Registrar: Tucows.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of trezor.io-app-web-suite.com shows a high‑risk brand‑impersonation infrastructure targeting Trezor users. The domain was registered on July 11 2025 through Tucows Domains Inc. and resolves to the Cloudflare address 188.114.96.3 (AS13335, United States). DNS is served by brett.ns.cloudflare.com and norah.ns.cloudflare.com. No TLS certificate is presented, and the site returns HTTP 200, indicating the content is reachable without encryption.
The page title observed is "Bot Verification," a common tactic used to evade automated scanning and to force human interaction. The hosting appears to be part of a known Airdrop Scam phishing kit, classified as a crypto‑scam. VirusTotal scans flagged the domain by six of ninety‑five AV engines, and Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service.
While the exact payload or credential‑capture pages have not been publicly disclosed, the combination of brand impersonation, lack of SSL, low trust score, and detection by multiple security vendors indicates a purposeful attempt to deceive Trezor users. Defenders should block the domain at perimeter firewalls, update URL filtering feeds, monitor DNS queries for the domain and its nameservers, and educate users that any unsolicited Trezor‑related requests originating from this domain are fraudulent. Continuous monitoring of the IP address and associated Cloudflare accounts is advised, as the infrastructure may be leveraged for additional crypto‑related scams.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: io-app-web-suite.com
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain io-app-web-suite.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive