trezursuite-io[.]created[.]app

The domain trezursuite-io.created.app is a brand impersonation scam targeting the Trezor cryptocurrency hardware wallet brand. It poses a significant risk as an elevated threat and has been taken offline. The site was observed to impersonate Trezor, potentially tricking users into divulging sensitive information or performing actions that could compromise their cryptocurrency holdings.

The domain was registered through Tucows Domains Inc. on July 12, 2023. It resolves to the IP address 216.150.16.1, which is located in the US and is part of AS16509 Amazon.com, Inc. The SSL certificate for trezursuite-io.created.app was issued by Let's Encrypt / R13. According to VirusTotal, 7 of 95 security vendors, including ADMINUSLabs, alphaMountain.ai, and CyRadar, have flagged this domain as malicious. The site appears on 1 security blocklist, specifically PhishDestroy, but it has not been flagged by Google Safe Browsing. The page title observed was 'Homepage', and the domain uses Vercel and HSTS technologies. The current HTTP status is 404, indicating the site is no longer active.

Users who may have interacted with trezursuite-io.created.app should take immediate steps to protect their cryptocurrency assets. If the site was used to perform any transactions or approve tokens, users should revoke token approvals and move their funds to a new, secure wallet. For those who may have entered login credentials, it is crucial to change passwords immediately, enable two-factor authentication, and monitor accounts for any unauthorized activity. To report this phishing domain, users can submit it to PhishDestroy or other relevant security organizations for further analysis and action.