eng-trezoiostart-us[.]wasmer[.]app

The domain eng-trezoiostart-us.wasmer.app was registered through Squarespace Domains II LLC and first appeared on October 16, 2018. It presents a page title that mimics the official Trezor website – "Official Site® | Trezor.io/start® - Trezor™ Device" – and is classified as a crypto‑related brand impersonation campaign targeting users of the Trezor hardware wallet. Infrastructure analysis shows the domain resolves to IP address 5.78.28.109, which is hosted in the United States by Hetzner Online GmbH (AS212317). The TLS certificate is issued by Let’s Encrypt (E7), and an HTTP 410 response indicates the resource has been removed, consistent with the reported offline status.

Reputation services flag the domain as highly untrustworthy; Scamadviser assigns a trust score of 1 out of 100, and one security blocklist currently lists the domain. VirusTotal records show that 16 of 93 scanned security vendors flag the domain as malicious, providing additional corroboration of its illicit nature. The domain is also blocked by PhishDestroy, reinforcing its detection across multiple defensive platforms.

Defenders should incorporate the domain and its associated IP address into blocklists, enforce DNS filtering for the wasmer.app suffix, and monitor for any resurgence of the site under alternative subdomains. Because the domain is presently offline, continuous re‑evaluation is advised to detect potential re‑hosting attempts. Evidence from the registrar, SSL issuance, HTTP status, detection counts, and blocklist presence collectively substantiate the elevated risk posed by this Trezor brand impersonation operation.