walletutrizoors[.]webflow[.]io
“Trezor Wallet | Trade Bitcoin & Ethereum | Trade Crypto & Stocks”
Riepilogo delle prove
This domain is flagged as an elevated-risk brand impersonation phishing site designed to deceive users of Trezor, a hardware cryptocurrency wallet provider. The infrastructure mimics legitimate wallet services, presenting a high-risk vector for credential theft, cryptocurrency theft, or malware distribution. The page title, 'Trezor Wallet | Trade Bitcoin & Ethereum | Trade Crypto & Stocks,' directly impersonates Trezor’s branding, increasing the likelihood of successful social engineering attacks against users seeking legitimate wallet services or trading platforms. Analysis indicates the domain walletutrizoors.webflow.io was registered on June 15, 2026, through MarkMonitor Inc., a registrar commonly associated with both legitimate and malicious domains. The domain currently resolves to the IP address 172.64.151.8 and is listed on three security blocklists, including MetaMask, PhishDestroy, and SEAL. VirusTotal reports 9 out of 95 security vendors flagging this domain as malicious. The SSL certificate is issued by Google Trust Services, which, while providing encryption, does not validate the legitimacy of the site’s content or intent. The domain has since been taken offline, but its prior activity and infrastructure remain a documented threat. To mitigate risks associated with brand impersonation phishing sites, users should verify domain authenticity by cross-referencing official sources before entering credentials or connecting wallets. Security teams should block the domain and associated IP (172.64.151.8) at the network level and monitor for related infrastructure, such as subdomains or newly registered lookalike domains. Endpoint protection and browser-based security tools should be configured to detect and block known phishing indicators, including the page title and SSL certificate issuer. Organizations should educate users on recognizing impersonation tactics, such as scrutinizing domain names, checking for official communication channels, and avoiding unsolicited links in emails or messages.
Data Coverage
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 13/08/2026
8 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
VirusTotal
3 → 9
Tecnologie
2 tecnologie identificate con alta affidabilità
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of walletutrizoors.webflow.io · checked Jun 25, 2026
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo