shepleycapital[.]com

The domain shepleycapital.com is identified as a brand impersonation threat targeting Trezor, a cryptocurrency hardware wallet provider. Analysis indicates the site presented itself as a user guide for setting up a Trezor wallet, likely intended to deceive users into exposing sensitive information or installing malicious software. The domain is currently offline, but prior activity suggests a targeted attempt to exploit trust in the Trezor brand. Infrastructure analysis reveals the domain was registered on April 26, 2026, through HOSTINGER operations, UAB, and resolved to the IP address 88.222.222.228. It was flagged by 1 security blocklist and appeared in 1 AlienVault OTX threat intelligence pulse. Despite 0 detections out of 95 VirusTotal vendors, the domain exhibited indicators of compromise, including the use of Let's Encrypt SSL certificates and technologies such as WordPress, MySQL, PHP, and jQuery. The Gridinsoft trust score for this domain is 0/100, further corroborating its malicious nature. The domain is currently offline, but organizations and individuals should remain vigilant. It is recommended to block the domain and associated IP address (88.222.222.228) at the network level. Users who may have interacted with the site should verify their systems for unauthorized access or installed software. Trezor users are advised to rely exclusively on official documentation and support channels to avoid similar threats. Monitoring for related domains registered through the same registrar or resolving to the same IP range is also advised.