view-start-trezro[.]pages[.]dev
“Trezor.io/start - Secure Your Crypto”
已存储的观测记录
观测到的标题差异
证据摘要
PhishDestroy identifies view-start-trezro.pages.dev as a live cryptocurrency drainer kit impersonating Trezor.io/start to harvest wallet recovery phrases and funds. Registered through Cloudflare, Inc., the single-page site serves a spoofed “Trezor.io/start – Secure Your Crypto” title designed to trick Trezor hardware wallet users into entering seed phrases. Behavioral telemetry confirms redirection hooks that copy clipboard entries and intercept keystrokes, indicative of a modern drainer script reused across multiple crypto brands.
Technical indicators are precise: VirusTotal shows 1/95 detections at scan time, the site resolves to IP 188.114.97.3 via Cloudflare proxy, uses a Google Trust Services SSL certificate, and operates under a Cloudflare Pages subdomain created after Trezor’s legitimate start portal. Independent blocklist aggregators have not yet blacklisted the domain despite its active status, indicating a narrow detection window and high evasion potential for unsuspecting victims.
Current status remains active and under_investigation; Pirlo Security Team continues real-time monitoring. Users are advised to bookmark only trezor.io/start, verify TLS certificates, and never enter seed phrases on any third-party page. Remaining risk is categorized as high due to low antivirus coverage and active redirection infrastructure. Regular updates to browser blocklists and wallet firmware reduce exposure.
Data Coverage
网络安全情报
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月11日
社区报告
由 1 名社区成员报告;首次发现于 2026年4月28日
- 已存储报告
- 1
- 已报告的唯一 URL
- 1
社区情报
1 条社区报告
类别PHISHING
The PhishFort Detection System has flagged this as a domain threat, classified as phishing. Associated tags: subdomain, typosquat. Threat detected at 2026-05-01T07:38:34.508Z.
技术
识别出 3 项高置信度技术
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of view-start-trezro.pages.dev · checked Apr 28, 2026
仿冒域名
已存储 74 个仿冒域名
显示全部(62)
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控