trezordevicesupport[.]com

This domain, trezordevicesupport.com, poses a high-risk threat as a brand impersonation site targeting Trezor, a hardware cryptocurrency wallet provider. The site is designed to deceive users into believing it is an official Trezor support or device management portal, potentially leading to credential theft, unauthorized transactions, or installation of malicious software. Given the absence of an SSL certificate and the domain's association with known phishing infrastructure, interactions with this site could expose users to financial loss or account compromise. Analysis indicates the domain was created on November 25, 2025, and is registered through NiceNIC International Group Co., Limited. It resolves to the IP address 158.94.210.251, hosted on AS202412 (Omegatech LTD) in the Netherlands. VirusTotal reports that 22 out of 95 security vendors have flagged this domain as malicious, and it appears on five security blocklists. The page title, 'Just a moment...,' suggests the use of evasion techniques, such as cloud-based filtering or anti-bot mechanisms, to delay or obscure malicious content from automated analysis tools. If you visited trezordevicesupport.com or interacted with its content, take immediate action to mitigate potential risks. Disconnect the affected device from the internet to prevent further data exfiltration. Reset any credentials entered on the site, particularly those related to cryptocurrency wallets or financial accounts. Scan the device for malware using updated security tools, focusing on detecting crypto-drainers or remote access trojans. Monitor linked accounts for unauthorized transactions and enable multi-factor authentication where available. Report the incident to Trezor’s official security team and consider notifying relevant cybersecurity authorities for further investigation.