trezor-inc[.]com

Trezor-inc.com is a domain identified as a high-risk brand impersonation threat targeting Trezor, a well-known hardware wallet brand. The domain is designed to deceive users into believing it is an official Trezor site, potentially leading to the theft of sensitive information and financial loss.

Analysis indicates that the domain has been flagged by 21 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion among the cybersecurity community. The domain was registered through West263 International Limited on May 22, 2026. Infrastructure analysis reveals that the domain appears on 3 security blocklists and has been included in 1 threat intelligence pulse on AlienVault OTX. The domain's current Good Guys status is not available, but its presence on multiple blocklists and the high number of security vendor flags are clear indicators of its malicious intent.

The domain is currently offline, which may indicate that it has been taken down by the registrar, hosting provider, or security community. Despite this, the risk remains high as the domain could be reactivated at any time. Users are advised to avoid interacting with this domain and to report any instances of it being active to their security teams or Trezor's official support. Security professionals should continue monitoring the domain and consider implementing DNS or IP blocking to prevent any potential re-emergence of the threat.