ChainPatrol
Web-Check 
SOCRadar 
LeakIX 
域安全和威胁情报
xn--trzor-k0a[.]com
“tręzor.com”
威胁判定
关键
92/100 证据评分
可用性
未验证
当前可达性未经验证
风险信号
病毒检测总数：14/91
报告概览
xn--trzor-k0a.com — 未验证. 证据摘要: VirusTotal 14/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); CF Radar malicious; PhishDestroy score 92/100. 注册商: Dominet (HK).
为保留原始取证记录，下方的 PhishDestroy AI 详细分析仍使用英文。
证据摘要
重要
This report analyzes the domain xn--trzor-k0a.com, which presented a page titled "tręzor.com". This domain is a likely phishing or impersonation site targeting users of the Trezor cryptocurrency hardware wallet brand, as the domain name and title mimic the legitimate Trezor brand to deceive users into entering sensitive information.
Technical evidence confirms the malicious nature of this domain. VirusTotal flagged it with 14 out of 95 detections, and it was identified by security vendors including alphaMountain.ai, BitDefender, CyRadar, ESET, and Emsisoft. The domain was registered on 2025-10-04 through registrar Dominet (HK) Limited, and its IP address is 91.212.166.78, located in Russia (RU). It has no SSL certificate and a GridinSoft trust score of 0 out of 100, indicating high risk.
As of the latest data, the site is offline or down. The risk level is high due to the impersonation of a well-known brand, the short registration duration, and the multiple security vendor flags. Users should avoid any interaction with this domain.
数据覆盖范围
VirusTotal
14 / 91
URLQuery
未检查
PhishStats
未检查
OTX
no community references
CF雷达
provider verdict: malicious
URLScan capture
存储的报告
URLScan verdict
分析完成
DNS 阻断
未检查
TLS
无证书数据
WHOIS
11 mo old
屏幕截图
3 captures · 2 sources
重定向链
未探查
网络安全情报
威胁响应 Pipeline
发现
Checks
Reports
可用性
15/17
公共封禁名单状态
已保存的截图
域名情报
域名
URLScan Verdict
分析完成
score 0 report ↗
服务器 / ASN
AmazonS3 · AS16509 AMAZON-02, US
IP 信誉
abuse score 0/100 0 reports checked 2026年8月1日
注册商
Dominet (HK)
(HK)
(HK)
IP 地址
91.212.166.78
注册信息创建 2025年10月4日 (317d)
技术细节DNS、SSL SAN、时间戳
首次发现2025年11月25日
DOM Analysisanalyzed 2026年4月23日score 88/100
IoC Extractionscanned 2026年8月1日0 wallet · 0 Telegram IoCs
Submitted URLhttp://xn--trzor-k0a.com/
域名服务器ns-cloud-b1.googledomains.comns-cloud-b2.googledomains.comns-cloud-b3.googledomains.comns-cloud-b4.googledomains.com
TLS Observationscanned 2026年8月15日
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
举报此域名
提交证据，帮助保护他人
VirusTotal 分析
14 / 91 安全供应商标记了该域
View on VT
Last analyzed Previous stored snapshot: 14 detections
ADMINUSLabs
alphaMountain.ai
BitDefender
Chong Lua Dao
CRDF
CyRadar
ESET
Fortinet
G-Data
Gridinsoft
Lionic
Sophos
VIPRE
Webroot
存档证据
Wayback Machine Snapshot
历史快照可供证据审查
证据与外部报告
证券分析
OSINT与情报分析
DNS 与网络
SEO 与域名
您是否受到本网站的影响？
If credentials were compromised, report immediately. Do not engage with recovery scammers.
如果您输入了帐户凭据、个人或付款信息，或者从此域下载了文件，请立即采取措施。以下资源可帮助您报告事件并保护自己。
PhishDestroy listing review 不是执法报告
域名申诉
如果您拥有该域名并认为该列表不正确，请请求审核
警惕“数据恢复”诈骗！ 犯罪分子可能会冒充调查员、律师或追债员再次联系受害者。 请勿支付预付费用或共享凭证。 了解有关康复欺诈的更多信息 →
相关基础设施与报告
Content matches 1
同一注册商: Dominet (HK) 6
signin.bh-stc.com 
最近的威胁报告 6
最近添加了来自 PhishDestroy 数据库的报告。这些发现链接并不意味着共享基础设施或所有权。