trezorwalleett[.]webflow[.]io
“T͎r͎e͎z͎o͎r͎ ͎W͎a͎l͎l͎e͎t͎^͎ ͎(͎O͎f͎f͎i͎c͎i͎a͎l͎*͎)͎ ͎|͎ ͎B͎i͎t͎c͎o͎i͎n͎ ͎&͎ ͎C͎r͎y͎p͎t͎o͎ ͎S͎e͎c͎u…”
trezorwalleett.webflow.io — Contenuto non disponibile. Simulazione del marchio: Trezor; Tipo di truffa: Brand Impersonation. Riepilogo delle prove: VirusTotal 13/91 (ChainPatrol, alphaMountain.ai, BitDefender, CyRadar, ESET); URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 89/100. Registrar: MarkMonitor.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
This domain, trezorwalleett.webflow.io, is flagged as an active brand impersonation threat specifically targeting Trezor, a cryptocurrency hardware wallet provider. The site presents itself as an official Trezor Wallet portal, employing visual and textual elements designed to deceive users into disclosing sensitive credentials, including private keys or recovery phrases. Analysis confirms the domain remains operational as of the latest verification, posing a direct risk to users of cryptocurrency storage solutions. Infrastructure analysis reveals the domain was registered on May 08, 2013, through MarkMonitor, Inc., and currently resolves to the IP address 104.18.36.248. Security vendor assessments indicate that 4 of 95 VirusTotal engines have flagged the domain as malicious, while it appears on 3 independent security blocklists. The SSL certificate is issued by Google Trust Services, providing a superficial layer of legitimacy that may mislead users. Gridinsoft’s trust score for this domain is 0 out of 100, reinforcing its classification as a high-risk entity. The page title, "T͎r͎e͎z͎o͎r͎ ͎W͎a͎l͎l͎e͎t͎^͎ ͎(͎O͎f͎f͎i͎c͎i͎a͎l͎*͎)͎ ͎|͎ ͎B͎i͎t͎c͎o͎i͎n͎ ͎&͎ ͎C͎r͎y͎p͎t͎o͎ ͎S͎e͎c͎u͎r͎i͎t͎y͎," includes obfuscation techniques to evade detection and mimic authenticity. The domain remains active and continues to present a credible facade to potential victims. Users are strongly advised to avoid interaction with this site and to verify the legitimacy of any cryptocurrency-related portal by cross-referencing official sources. Organizations should update blocklists to include this domain and its associated IP address, while monitoring for similar impersonation attempts targeting cryptocurrency brands. Immediate reporting to relevant security teams and domain registrars is recommended to facilitate takedown procedures. Cryptocurrency holders should enable multi-factor authentication and use hardware-based solutions for enhanced security, avoiding reliance on web-based interfaces for sensitive operations.
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Analisi di VirusTotal
Prove archiviate
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of trezorwalleett.webflow.io · checked Jun 26, 2026
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo