trezor[.]io-personal[.]help
“Trezor Suite”
Riepilogo delle prove
The domain trezor.io-personal.help was registered on February 21, 2026 through Gname.com Pte. Ltd. and is hosted on an IP address (178.16.54.185) that resolves to the Netherlands under ASN 202412 owned by Omegatech LTD. The domain resolves to two authoritative nameservers, a9.share-dns.com and b9.share-dns.net, and currently returns no SSL certificate, indicating an unencrypted HTTP service. The page title presented by the site is "Trezor Suite," and the threat classification in the intelligence set identifies the activity as a crypto‑scam that impersonates the hardware‑wallet brand Trezor. The domain appears on a single security blocklist and has been actively blocked by PhishDestroy.
Gridinsoft assigns a trust score of 0 / 100, indicating a high likelihood of malicious intent. VirusTotal analysis shows that 18 of 93 security vendors have flagged the domain, reinforcing the suspicion of abuse. The site has been taken offline at the time of reporting, but the infrastructure components—namely the hosting IP, registrar, and name server configuration—remain observable and could be reused for future campaigns. Defenders should continue to block the domain and its associated IP address at perimeter defenses, update threat‑intel feeds with the observed indicators, and monitor the registrar Gname.com for any new domains that share similar naming patterns.
Additionally, security teams should watch for other domains that resolve to the same IP or use the same nameservers, as they may be part of a broader impersonation infrastructure targeting cryptocurrency users. The lack of HTTPS and the low trust score further suggest that any remaining content should be considered unsafe. Continuous re‑evaluation is advised in case the domain is re‑activated or similar clones appear.
Istantanea delle prove inviate
- Inviato
- Voci del registro
- 1
- ID del caso
PD-20260203-964988- Titolo della pagina acquisita
- Trezor Suite
- Artefatto PDF
- Prova in PDF
Testo completo delle prove
Policy Violations: Illegal Activities section forbids phishing, fraud, fake sites, malware distribution; registrar investigates and may suspend or delete domain
Applicable Laws: Computer Misuse Act 1993 §§3+, Penal Code §§415–420 (cheating), Online Criminal Harms Act (OCHA)
Data Coverage
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | trezor.io-personal.help |
malicious | Sinkholed |
| DNS4EU | trezor.io-personal.help |
malicious | Sinkholed |
| Quad9 DNS | trezor.io-personal.help |
malicious | Sinkholed |
| Cloudflare DNS | trezorpro.app |
malicious | Sinkholed |
| Hagezi Threat Feed | trezorpro.app |
malicious | Sinkholed |
| DNS4EU | trezorpro.app |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 13/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Registration: io-personal.help
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain io-personal.help behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo