trezor[.]io-personal[.]help
“Trezor Suite”
trezor.io-personal.help — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: Trezor; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 18/93 (ADMINUSLabs, Criminal IP, BitDefender, Chong Lua Dao, Cluster25); URLQuery 6 alerts; URLScan malicious verdict; PhishDestroy score 95/100. Registrar: Gname.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain trezor.io-personal.help was registered on February 21, 2026 through Gname.com Pte. Ltd. and is hosted on an IP address (178.16.54.185) that resolves to the Netherlands under ASN 202412 owned by Omegatech LTD. The domain resolves to two authoritative nameservers, a9.share-dns.com and b9.share-dns.net, and currently returns no SSL certificate, indicating an unencrypted HTTP service. The page title presented by the site is "Trezor Suite," and the threat classification in the intelligence set identifies the activity as a crypto‑scam that impersonates the hardware‑wallet brand Trezor. The domain appears on a single security blocklist and has been actively blocked by PhishDestroy.
Gridinsoft assigns a trust score of 0 / 100, indicating a high likelihood of malicious intent. VirusTotal analysis shows that 18 of 93 security vendors have flagged the domain, reinforcing the suspicion of abuse. The site has been taken offline at the time of reporting, but the infrastructure components—namely the hosting IP, registrar, and name server configuration—remain observable and could be reused for future campaigns. Defenders should continue to block the domain and its associated IP address at perimeter defenses, update threat‑intel feeds with the observed indicators, and monitor the registrar Gname.com for any new domains that share similar naming patterns.
Additionally, security teams should watch for other domains that resolve to the same IP or use the same nameservers, as they may be part of a broader impersonation infrastructure targeting cryptocurrency users. The lack of HTTPS and the low trust score further suggest that any remaining content should be considered unsafe. Continuous re‑evaluation is advised in case the domain is re‑activated or similar clones appear.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | trezor.io-personal.help |
malicious | Sinkholed |
| DNS4EU | trezor.io-personal.help |
malicious | Sinkholed |
| Quad9 DNS | trezor.io-personal.help |
malicious | Sinkholed |
| Cloudflare DNS | trezorpro.app |
malicious | Sinkholed |
| Hagezi Threat Feed | trezorpro.app |
malicious | Sinkholed |
| DNS4EU | trezorpro.app |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: io-personal.help
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain io-personal.help behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
PD-20260203-964988 Recipient: complaint@gname.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive