trezor49[.]vip
“exchange”
trezor49.vip — 확인되지 않음. 브랜드 사칭: Trezor; 사기 유형: Crypto Scam. 증거 요약: VirusTotal 3/94 (alphaMountain.ai, Ermes, Fortinet); URLQuery 4 alerts; Spamhaus DBL_SPAM; PhishDestroy score 69/100. 등록기관: Gname.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
This domain, www.trezor49.vip, is identified as cryptocurrency wallet phishing infrastructure targeting Trezor, a hardware wallet provider. The site is currently offline, though prior analysis confirms its role in brand impersonation designed to deceive users into divulging sensitive credentials or financial information. The domain was operational long enough to be assessed and subsequently blocked by security mechanisms. Analysis of the domain reveals multiple technical indicators of malicious intent. The domain was registered on March 7, 2026, through Gname.com Pte. Ltd., and resolved to the IP address 202.95.1.30. Security vendors flagged the domain in 13 of 95 VirusTotal scans, placing it on one security blocklist. The site employed a Let's Encrypt SSL certificate and utilized technologies such as amCharts, Bootstrap, Vue.js, Nginx, Cloudflare, Swiper, jQuery, and HSTS. A Gridinsoft trust score of 0/100 further corroborates its classification as high-risk infrastructure. The domain is currently offline, but its prior activity warrants continued monitoring. Organizations and individuals are advised to block the domain and associated IP address at the network level. Users who may have interacted with the site should immediately revoke any credentials or recovery phrases entered, monitor financial accounts for unauthorized activity, and consider hardware wallet integrity checks. Security teams should update detection rules to include this domain and its indicators of compromise in threat intelligence feeds.
네트워크 보안 인텔리전스
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | www.trezor49.vip |
malicious | Sinkholed |
| Hagezi Threat Feed | ht.trezor49.vip |
malicious | Sinkholed |
| Hagezi Threat Feed | admin.trezor82.cz |
malicious | Sinkholed |
| DNS4EU | admin.trezor82.cz |
malicious | Sinkholed |
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
사용 기술 · 10 identified
amCharts is a JavaScript-based interactive charts and maps programming library and tool.
amcharts.com 신뢰도 100%Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com 신뢰도 100%Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.
vuejs.org 신뢰도 100%Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 신뢰도 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 신뢰도 100%Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.
swiperjs.com 신뢰도 100%jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 신뢰도 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 신뢰도 100%Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.
popper.js.org 신뢰도 100%VirusTotal 분석
보관된 증거
증거 및 외부 보고서
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.