Another fake Trezor Wallet website asking for your seed phrase

[witcher_sense]

Hardware wallets are considered to be one of the safest ways to store bitcoin and cryptocurrencies, especially for newbies because all the important data required for signing transactions is stored offline on a piece of hardware.
However, there are many phishing websites impersonating real hardware wallet producers.
They usually ask you for your seed phrase (12 or 24 words) to "restore" your wallet. But what they really do is stealing your money.
I want to report one of the phishing websites that pretends to be Trezor wallet.

WARNING! SCAM - DO NOT CLICK

Code:

https://trez0r.com/
http://archive.is/6b5jT

Code:

Domain Name: TREZ0R.COM
Registry Domain ID: 2532695461_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2020-06-01T20:03:49Z
Creation Date: 2020-05-31T21:13:44Z
Registry Expiry Date: 2021-05-31T21:13:44Z

REAL TREZOR WALLET WEBSITE

https://trezor.io/

Please note, you don't have to trust even me and always verify its genuinity for yourself and then you can bookmark it, for instance, to prevent phishing attacks of this kind.

But even then, you double check everything before entering any data. In the cryptocurrency space, we don't trust anyone, we verify. Stay safe!

[1714104054]

1714104054

[1714104054]

1714104054

[Lucius]

Just one more fake site in a row, I have no doubt there are dozens, if not hundreds of similar ones. Some people actually make a living from things like this, because it is enough for them to catch only one sucker once a month with a decent amount on their hardware wallet. What’s tragic about this whole story that revolves around magical internet money, super secure devices that store that same treasure, are users who don’t know what they’re actually doing.

Despite the warnings that come with the hardware wallet, the warnings on the official websites of the manufacturers and on all crypto forums, why does someone decide to share their seed in this way?


I check site with VirusTotal, and it is clean, therefore I would recommend that you report it for phishing by using this Report Phishing Page. If you are using Firefox, this link is available directly from the browser -> Click three horizontal dashes - Help-> Report a deceptive page

Second option is to report to domain/hosting service -> https://support.namecheap.com/index.php?/Tickets/Submit

[notblox1]

I reported that fake website to google, and I suggest that everyone do the same thing.
How many more scam website are they going to make?
I think they will never stop, and people just need to learn how not to fall on this scams.
It can be easy or hard way.

[coupable]

I reported that fake website to google, and I suggest that everyone do the same thing.

Already reported.

How many more scam website are they going to make?
I think they will never stop, and people just need to learn how not to fall on this scams.
It can be easy or hard way.

I would also like to mention here that according to dnstwister, there are already 24 domains similar to trezor official domain. Check this link: https://dnstwister.report/search?ed=7472657a6f722e696f
I have also reported this in the official ANN thread of trezor in the "Hardware Wallets" board.

[DdmrDdmr]

The same procedure has been around for some time, and seems pretty recurrent:

[WARNING]: Fake Trezor - https://login-trezor.io/
[PSA] Fake Trezor wallet website
BEWARE - Fake Trezor Web Page = Triezor.io
Vorsicht vor Fake Trezor site (in german)

One really needs to bookmark and/or be extremely careful when accessing URLs of this nature. Of course, not everyone roams this forum frequently enough to have embedded this sort of scam into their retina, and as it is still being used, it must still be profitable enough.

[witcher_sense]

I check site with VirusTotal, and it is clean, therefore I would recommend that you report it for phishing by using this Report Phishing Page. If you are using Firefox, this link is available directly from the browser -> Click three horizontal dashes - Help-> Report a deceptive page

Second option is to report to domain/hosting service -> https://support.namecheap.com/index.php?/Tickets/Submit

Unfortunately, that is undetectable to VirusTotal, there is just a simple web form there into which users are absolutely voluntarly putting sensitive information that obviously shouldn't be disclosed to anyone. Interestingly enough, after information about seed phrase is put, it redirects you to official website like nothing happened. I found that link through google searching on Internet Explorer, so don't use this browser if you are concerned to stay safe.

Anyway, it seems that phishing website got banned by Google. Thank you guys for help!

[Lucius]

Unfortunately, that is undetectable to VirusTotal, there is just a simple web form there into which users are absolutely voluntarly putting sensitive information that obviously shouldn't be disclosed to anyone.

Sometimes such sites also may contain link to some malware, but in most cases it is true that VT will not detect anything. I just post that to inform users that nothing bad will happen if you just visit that site, without revealing your seed.

Anyway, it seems that phishing website got banned by Google. Thank you guys for help!

Vires in numeris (strength in numbers), is a very powerful thing - the more reports, the faster the response is from Google, and this site is now blocked in most browsers. I confirm Firefox and Brave show same message about deceptive page.