info-trezorhelp[.]zapier[.]app

The domain info-trezorhelp.zapier.app is actively engaged in brand impersonation, targeting users seeking legitimate resources for Trezor. The site’s landing page is titled "Trézor.io/Start® | Official®", closely mimicking the official branding and onboarding pages of the target entity. This tactic is designed to harvest user credentials, wallet seeds, or other sensitive information under the guise of legitimate support, presenting a significant risk of account compromise and asset loss.

Technical analysis indicates that 18 out of 95 security vendors on VirusTotal identify this domain as malicious. The domain resolves to IP address 64.239.123.129 and is protected by a Let's Encrypt SSL certificate, which can lend a false sense of legitimacy to unsuspecting visitors. Blocklists and security feeds have begun to flag this infrastructure, and its usage of a recognizable brand in both the page title and domain name is a clear indicator of intent to deceive. The presence of an active SSL certificate and the deliberate use of diacritical marks in the page title further support the impersonation strategy.

Users who have interacted with info-trezorhelp.zapier.app should immediately assume that any submitted credentials or sensitive information may be compromised. It is recommended to change passwords, revoke session tokens, and reset any affected security mechanisms. Users should also monitor their accounts for suspicious activity and report the incident to the appropriate security teams. All further communication or interaction with this domain should be avoided to prevent additional exposure.