trezor-hub-app[.]cc

The domain trezor-hub-app.cc has been identified as a confirmed brand impersonation phishing site specifically targeting users of the Trezor cryptocurrency hardware wallet. This domain is now offline, but its recent activity underscores the persistent threat of phishing campaigns designed to steal sensitive financial information. The site posed as a legitimate Trezor Bridge connection page, using the title 'Trezor Bridge: Connect Your Trezor Wallet Securely' to deceive visitors.

Technical analysis reveals that trezor-hub-app.cc was registered through Spaceship, Inc. on October 21, 2025, and resolved to IP address 172.67.155.209 at the time of analysis. The domain was flagged by 16 out of 95 security vendors on VirusTotal, indicating broad recognition of its malicious nature. It also appeared in 16 threat intelligence pulses on AlienVault OTX and was listed on 2 security blocklists. Notably, the domain lacked an SSL certificate, a common red flag for phishing sites that aim to intercept data without encryption.

Given its elevated risk level and confirmed impersonation of the Trezor brand, users are strongly advised to avoid any interaction with trezor-hub-app.cc or similar lookalike domains. Always verify official Trezor URLs directly from the company's website and never enter wallet credentials or recovery phrases on third-party sites. For ongoing protection, enable browser security extensions and keep antivirus software updated to block such threats automatically.