[Warning] trez0r.io (phishing website)!!!

[SFR10]

What happened:
While I was browsing the "Trezor's subreddit" page, I noticed there's a warning from a few days back, and since some of the users might not be frequent visitors of that page, I'm going to extend the warning here ^{[credit goes to @dpeacock93]}!

Reference Link:
- warning scam site
- Archived version of trez0r.io

Code:

trez0r.io

Additional Notes:
If you hover over some of the texts on the header and footer area, you'll see there's also another phishing website (archived version of trezoŗ.org)!
^{- Unfortunately, the main one is using NameCheap services, so it'd probably take a while to take it down [please take a minute to report them].}

Code:

trezoŗ.org

Domain name: trez0r.io
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Creation Date: 2022-06-21T16:14:34.03Z
Registrar Abuse Contact Email: abuse@namecheap.com
Registrar Abuse Contact Phone: +1.9854014545

Domain name: trezoŗ.org
Registrar WHOIS Server: whois.reg.com
Registrar URL: https://www.reg.com
Registrar URL: https://www.reg.ru
Creation Date: 2022-05-31T08:14:26Z
Registrar Abuse Contact Email: abuse@reg.ru
Registrar Abuse Contact Phone: +7.4955801111

[1714623488]

1714623488

[1714623488]

1714623488

[1714623488]

1714623488

[1714623488]

1714623488

[1714623488]

1714623488

[1714623488]

1714623488

[owlcatz]

Some big companies attempt to buy all types of these weird wrongly-spelled domain names, just so this type of bullshit won't happen. Too bad Trezor can't get a handle on that.  

Edit - Malwarebytes is already blocking it from me. 👍

[DireWolfM14]

Thanks for the warning.

If I may make a suggestion; please put the scam sites' link in code brackets, it'll help prevent someone from inadvertently clicking on them.

The one with the "0" instead of the "o" isn't likely to work, the difference is easily noticeable even with my aging eyes.  The .org site is a bit trickier, especially with that funny looking "r".  If that one was coupled with the .io domain extension that would be a hard one to avoid if you didn't take other precautions.

[dkbit98]

This phishing website looks almost identical with original Trezor website and they even have links to original trezor github page.
One difference I noticed is when I click ''I already own Trezor'' because you can't download Trezor Suite software.
I would suggest everyone to use only original Trezor Suite and avoid web version scams like this.
 

[DireWolfM14]

This phishing website looks almost identical with original Trezor website and they even have links to original trezor github page.
One difference I noticed is when I click ''I already own Trezor'' because you can't download Trezor Suite software.
I would suggest everyone to use only original Trezor Suite and avoid web version scams like this.

I never liked the trezor.io or beta web apps, personally.  I was always afraid they were a phishing risk just waiting to happen.  Trezor Suite is pretty good, lots of control, and it's handy if you have some shitcoins floating around.  Obviously it's much less likely to result in a phishing attack, and therefor safer than the webapp.  Personally, I still prefer to use Electrum to access my Trezor wallets.

[yhiaali3]

Yes right, the best way to avoid phishing sites is to use Trezor-Suite, the latest version can be downloaded from the official website "Trezor-Suite-22.6.5-win-x64" There are different versions for Windows, Mac and Linux users, personally I own a Trezor wallet "Model T" And since the Trezor-Suite program was released, enter the wallet through the program only because it is safer and easier to control the wallet. I also recommend adding the official website to the favorites and entering the site from there only because entering from Google makes some people fall into the trap of phishing sites because they use very similar names With the names of the official sites as in this case.

[SFR10]

Some big companies attempt to buy all types of these weird wrongly-spelled domain names, just so this type of bullshit won't happen. Too bad Trezor can't get a handle on that.  

Unfortunately, you're correct... I don't think I've ever seen Trezor spend a significant amount for something ^{[e.g. a proper ad, unlike Ledger]} that could potentially lead to more sales and that makes me believe they'll never buy the remaining domain extensions with their premium price tags ^{[unfortunately]}.

If I may make a suggestion; please put the scam sites' link in code brackets, it'll help prevent someone from inadvertently clicking on them.

Did as requested, but kept the archived versions ^{[thank you for the suggestion]}

[OgNasty]

Some big companies attempt to buy all types of these weird wrongly-spelled domain names, just so this type of bullshit won't happen. Too bad Trezor can't get a handle on that.  

Edit - Malwarebytes is already blocking it from me. 👍

Yes, it's up to the company to buy every domain that could possibly be misconstrued by morons as legitimate.  That's the solution to people not using the right domain right?  With that line of thinking we should be suing every company that doesn't do this right?  It's always someone else's fault when you make a dumb mistake right?  People like you with no personal responsibility that are always looking to blame others for your own idiocy make me sick.  Really.  Try creating something yourself for once so you can see what it's like dealing with people like you.