tradherwallet[.]webflow[.]io

This domain, tradherwallet.webflow.io, poses an elevated risk of brand impersonation, specifically targeting users of Trezor hardware wallets. The threat involves misleading individuals into believing they are interacting with a legitimate Trezor site, potentially leading to the compromise of sensitive information such as login credentials and personal data.

Analysis indicates that the domain has been flagged by 18 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection. The domain is registered through MarkMonitor, Inc., and resolves to the IP address 172.64.151.8, which is located in the United States and belongs to AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1. The domain was created on March 05, 2026, and appears on one security blocklist. These indicators suggest that the domain is actively being used for malicious purposes, despite its recent creation.

To mitigate the risk associated with this threat, users are advised to verify the domain and URL of any site they visit by cross-referencing with official Trezor communication channels. Security teams should monitor for and block traffic to this domain, and consider implementing additional security measures such as two-factor authentication and regular security awareness training. Organizations should also ensure that their network security solutions are up-to-date and capable of detecting and blocking known malicious domains.