trezor-suite-help[.]square[.]site

This domain, trezor-suite-help.square.site, poses a specific threat of brand impersonation targeting the cryptocurrency hardware wallet brand Trezor. The site was designed to deceive users into believing it is an official Trezor support or service page, potentially leading to the compromise of sensitive information such as login credentials or private keys.

Infrastructure analysis reveals that the domain has a Gridinsoft trust score of 0/100, indicating a highly untrusted site. VirusTotal reports that 4 out of 95 security vendors have flagged this domain, suggesting it has been involved in malicious activities. The domain was registered through MarkMonitor Inc. on February 05, 2019, and is currently listed on 3 security blocklists. The site uses technologies such as Weebly, MySQL, PHP, Vue.js, reCAPTCHA, and HSTS, and is protected by a Let's Encrypt SSL certificate. These technologies and the domain's low trust score are consistent with the practices of threat actors aiming to create convincing but fraudulent web pages.

If users have visited this domain, they should immediately check their Trezor accounts for any unauthorized activity and consider changing their passwords and other access credentials. Users are advised to report any suspicious interactions to Trezor's official support channels and to avoid clicking on links or downloading files from unverified sources in the future. It is also recommended to use multi-factor authentication (MFA) for added security.