{Warning}: Fake Trezor pops up in Google

[Baofeng]

For those beginners/newbies,

If you used Google to search for hardware wallets such as Trezor, just be careful because there's a lot of ads popping in the first page which is either a fake or a phishing site. Please be careful.

You can bookmark the official page, https://trezor.io/.



I urged everyone to report it here: https://support.google.com/google-ads/contact/vio_other_aw_policy

[1715415981]

1715415981

[1715415981]

1715415981

[1715415981]

1715415981

[1715415981]

1715415981

[Bttzed03]

Maybe avoid using google as your search engine as a precaution 

I tried the same search but using duckduckgo and this is what appeared:

[iamaruf]

Common issue in Google. You can report that ads.they are paying Google to be in 1st position.only newbies will fall in this scam. 1year ago i searched MEW then saw fake website in the 1st page (paid). Better to avoid ads link and report that ad.BTW this post will Help who don't know the real websites.         

[d3nz]

That's really bad and it reallt needs a caution for new buyers. They will surely confused if its legit or not and google should not show this fake website.

If there is an ads avoid it or use an adblocker and only visit a legit and official website of trezor.

[panganib999]

This has been said and will be said a lot of times now upto the future, never trust pop up sites and windows, as much as possible ignore it so you could completely avoid it and be victimized by it. If you're really into uaing the site, evaluate carefully everything and if something seems off then don't ignore your gut feels and try veryfying if the site is fake or not. Make sure to only get application links at official community of the softwares and/or buy a licensed one.

[masulum]

Maybe avoid using google as your search engine as a precaution 

This doesn't guarantee using Duckduckgo, start page and other search engines to avoid fake sites. I had experience about it few months ago when I'm trying to use keywords using "bitcointalk new bounty" and here is an example. The most important think is double check search results before click pages. Knowledge about official sites is important, so we can skip any search results not from the official site.

[Chikito]

Found similar like OP today



I don't think so what for they make ads "Trezor.io | Trezor (Official) | The Original Hardware Wallet" ‎.
When I visiting that site isn't direct to phishing trezor website.



I did try to Scaning https://www.virustotal.com/gui/url/217f4e849bbeff2dfcf8d19949bf721c987c8b94ce8118cfcecd1f9c4fa34f58/detection
and found Forcepoint ThreatSeeker - Suspicious

Code:

Domain name:TREZBR.GQ
Organisation:
Equatorial Guinea Domains B.V.
Dominio GQ administrator
P.O. Box 11774
1001 GT Amsterdam
Netherlands
Phone: +31 20 5315725
Fax: +31 20 5315721
E-mail: abuse: abuse@freenom.com, copyright infringement: copyright@freenom.com

Domain Nameservers:
ALEXIS.NS.CLOUDFLARE.COM
GRACE.NS.CLOUDFLARE.COM

[joniboini]

When there are more than 4 websites saying they're the official website, most people should've realized that they're fake.

Google or any search engine provider should do a check first before they put the ads. Sadly most of them just want the money and left the DD to the users.

[BitcoinsGreat]

For those beginners/newbies,

If you used Google to search for hardware wallets such as Trezor, just be careful because there's a lot of ads popping in the first page which is either a fake or a phishing site. Please be careful.

You can bookmark the official page, https://trezor.io/.

I urged everyone to report it here: https://support.google.com/google-ads/contact/vio_other_aw_policy

I have reported it but seriously whats wrong with the google ads.  They are showing the scam site on the top  
Anyways we should double check all the sensitives sites, before performing any activity on them to avoid getting scammed by these phishing sites.

[Stack23]

For those beginners/newbies,

If you used Google to search for hardware wallets such as Trezor, just be careful because there's a lot of ads popping in the first page which is either a fake or a phishing site. Please be careful.

You can bookmark the official page, https://trezor.io/.



I urged everyone to report it here: https://support.google.com/google-ads/contact/vio_other_aw_policy

As you can see the first four links are Ads Labeled by [Ad] and the fifth link is the real website.
Whenever you search for a specific site, ignore the links which are marked as Ads in the google search.

[bL4nkcode]

I have reported it but seriously whats wrong with the google ads.  They are showing the scam site on the top  

That's how competent google on their so called restrict crypto ad policy. Basically, they just accept any crypto ads without even scanning or researching about the ad, they just want money.

If anyone who don't want to get any ads, on website or even on search engines, just use ad blocker, I recommend uBlock Origin for chrome, firefox and some chromium based browser.

[Adriano2010]

I also note this now but only if i search on desktop mode from phone, i report it, hope new people to crypto will not fall on this scam/phising attemp

[JohnBitCo]

I also note this now but only if i search on desktop mode from phone, i report it, hope new people to crypto will not fall on this scam/phising attemp

Other than reporting to google only, we should also inform to trezor through support or by email etc that there is some phishing attempt related to their site. This way they can publish this on their official twitter handle and people can be inform about this scam.

[BitMaxz]

Google or any search engine provider should do a check first before they put the ads. Sadly most of them just want the money and left the DD to the users.

I'm sure they check, but with lack of knowledge of advertised product or service, i doubt they can identify all scam/malicious ads.

No, they don't they mostly approved by a bot I have experienced on using Google ads I'm sure they are abusing the free $100 coupon to advertise the fake copy of trezor website. Google will take action if someone reported it but if not the ads are free to stay at the top. So people should report this fake trezor if they found it while searching so that Google will do a manual check.


It seems they keep changing the domain from time to time look at this new domain below.



These two are connected:

Code:

www.trezor.center
https://trezor.promo/

If you click the ads with trezor[.]center they will redirect you to trezor[.]promo.

I believe that they are using "Cloacking" it's a blackhat method where they're hiding the real domain and they also collecting many IPs.
They will use the collected IPs in the future if their domain is ban or reported they will make a new domain they will use the collected IP's to redirect them to another website just like what happen to DroomieChikito he redirects to a different website.

[Adriano2010]

No, they don't they mostly approved by a bot I have experienced on using Google ads I'm sure they are abusing the free $100 coupon to advertise the fake copy of trezor website. Google will take action if someone reported it but if not the ads are free to stay at the top. So people should report this fake trezor if they found it while searching so that Google will do a manual check.


It seems they keep changing the domain from time to time look at this new domain below.



These two are connected:

Code:

www.trezor.center
https://trezor.promo/

If you click the ads with trezor[.]center they will redirect you to trezor[.]promo.

I believe that they are using "Cloacking" it's a blackhat method where they're hiding the real domain and they also collecting many IPs.
They will use the collected IPs in the future if their domain is ban or reported they will make a new domain they will use the collected IP's to redirect them to another website just like what happen to DroomieChikito he redirects to a different website.

As i see all this redirects me to this scam site

Code:

https://wallet.trezcr.com/#/

And the scammers ask for the seed, hope soon someone will detect what is the IP who host the website and contact authorities to catch these guys.

[LbtalkL]

~

Thanks for the info, Tried it and found the same, this is alarming why google allow this kind of malicious attempt without reviewing the ads first.
I guess this is not only on trezor maybe some exchanges and another well-known wallet too. Pretty much the same on google playstore fake app, scammers duplicate any app so we need to check the uploader every time.

That's how competent google on their so called restrict crypto ad policy. Basically, they just accept any crypto ads without even scanning or researching about the ad, they just want money.

If anyone who don't want to get any ads, on website or even on search engines, just use ad blocker, I recommend uBlock Origin for chrome, firefox and some chromium based browser.

I have Adguard  ad blocker, ads like that can't be blocked, testing uBlock Origin now.

EDIT: changing my adguard to uBlock Origin. uBlock blocked it completely. Thanks

[Chikito]

You can bookmark the official page, https://trezor.io/.

When write it back, We Should double check it before push enter button
like today I make typo, when writing trezor to wroten tresor

Code:

https://tresor.io/

Domain information :

Code:

Domain Name: TRESOR.IO
Registry Domain ID: D503300000056100639-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2018-11-14T21:36:54Z
Creation Date: 2017-12-12T22:26:42Z
Registry Expiry Date: 2019-12-12T22:26:42Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc
Registrar IANA ID: 1068

Look 2 years old and nobody going report

[UserU]

docs.google.com as a Trezor website?

Wut

[bL4nkcode]

EDIT: changing my adguard to uBlock Origin. uBlock blocked it completely. Thanks

Ye, but you or anyone should not be dependent on uBlock or any adblockers, people should be aware of any scheme and tricks used by these scammers and hackers around the internet.