web-trezor-io-start-us[.]codedesign[.]app

This domain, web-trezor-io-start-us.codedesign.app, is actively flagged as a high-risk brand impersonation targeting Trezor, a cryptocurrency hardware wallet provider. Analysis indicates the domain is designed to mimic the official Trezor onboarding process, as evidenced by the page title 'Trezor.io/Start | Begin Your Crypto Security Journey Today.' Infrastructure reveals the domain resolves to IP address 34.196.2.149 and is registered through Porkbun LLC, with a Let's Encrypt SSL certificate in place. The domain appears on four security blocklists, including SEAL, MetaMask, PhishDestroy, and BLP-Malware, and is flagged by 16 of 95 security vendors on VirusTotal. No legitimate association with Trezor or its official infrastructure has been identified. Defenders should treat this domain as malicious and prioritize blocking it at the DNS, proxy, or endpoint level. Further investigation into the hosting provider and associated IP range may reveal additional related threats. The domain remains active as of July 12, 2026, and users encountering it should be advised to avoid interaction and verify any cryptocurrency-related communications through official Trezor channels.