trezor-en-login[.]square[.]site

The domain trezor-en-login.square.site is currently active and is flagged for brand impersonation targeting Trezor, a well-known cryptocurrency hardware wallet. The phishing page is hosted under infrastructure managed by Weebly, Inc., located in the United States. The domain has received a status of 200, indicating that it is accessible at the time of this report. The site appears on three security blocklists, and analysis from VirusTotal shows that 10 out of 91 security vendors have flagged this domain as malicious. The observed page title reads: '★ Trezor® Suite® App® | Getting Started | Official Site*', which suggests an effort to deceive users into believing they are on the legitimate Trezor site. The registration is handled through MarkMonitor Inc., a service often used by companies to protect their brands. Given the current evidence, it is recommended that organizations monitor for reports of attempted credential phishing involving this domain and advise users to remain vigilant against unsolicited login requests. Blocking this domain and others that demonstrate similar characteristics may help mitigate risk to end-users.