trezorwwalletd[.]webflow[.]io

This domain, trezorwwalletd.webflow.io, is actively engaged in brand impersonation targeting Trezor, a well-known cryptocurrency hardware wallet provider. The site presents itself as the official Trezor Wallet Suite application, attempting to deceive users into interacting with fraudulent wallet software. As of the latest analysis, the domain remains operational and poses a high risk to individuals seeking legitimate cryptocurrency management tools. Infrastructure analysis reveals that the domain resolves to the IP address 172.64.151.8 and was originally created on May 08, 2013, though its current malicious use appears to be a recent development. The domain is registered through MarkMonitor, Inc., a common registrar for both legitimate and malicious entities. It holds a Gridinsoft trust score of 0/100, indicating no credibility, and is flagged by 9 of 95 security vendors on VirusTotal. Additionally, the domain appears on three security blocklists, including PhishDestroy and MetaMask, and is recognized by SEAL as a threat. The SSL certificate is issued by Google Trust Services, which, while legitimate, does not mitigate the domain's malicious intent. Current status confirms that trezorwwalletd.webflow.io remains active, continuing to host content that mimics the Trezor Wallet Suite interface. Users are advised to avoid interacting with this domain entirely. Organizations should update their security blocklists to include this domain and its associated IP address. Individuals who may have engaged with the site should immediately cease all interactions, revoke any connected wallet permissions, and monitor their cryptocurrency accounts for unauthorized transactions. Cryptocurrency users are further advised to verify the authenticity of any wallet-related websites by cross-referencing with official sources and utilizing hardware-based authentication methods where possible.