ticket-trezor[.]com

Analysis of ticket-trezor.com shows a newly registered domain created on 2026-08-03 and hosted on IP 104.21.63.165. The registration was completed through NICENIC INTERNATIONAL GROUP CO., LIMITED, and the authoritative nameservers are leanna.ns.cloudflare.com and rustam.ns.cloudflare.com, indicating Cloudflare DNS services. The domain has been classified as a high‑risk crypto drainer and remains active as of the report date (2026‑08‑05). Threat intelligence indicates that the site is currently listed on three security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, suggesting that wallet‑related defenses have recognized malicious activity aimed at extracting cryptocurrency assets.

VirusTotal records show that the domain was examined by 91 scanning engines, none of which returned a detection. The absence of a detection flag does not constitute validation of safety; it merely reflects that the engines have not yet identified a known payload or behavior associated with the domain. No public TLS certificate details, HTTP response codes, or page‑title information are available in the supplied intelligence, leaving the surface‑web characteristics unverified. Consequently, the precise content served to visitors, including any credential‑phishing forms or malicious scripts, cannot be confirmed at this time.

Given the combination of a fresh registration, association with a Cloudflare‑managed IP, inclusion on multiple blocklists, and explicit blocks by wallet security products, the domain should be treated as hostile. Defensive recommendations include adding ticket‑trezor.com to network deny lists, enforcing DNS‑level filtering, monitoring outbound connections to its IP address, and alerting users against any unsolicited prompts to connect cryptocurrency wallets through this domain.