trozr-eiwuy.deylaa12.workers.dev
Categorie: Phishing
Om het product met alle functies te gebruiken, moet u een licentie voor Combo Cleaner aanschaffen. Beperkte gratis proefperiode van zeven dagen beschikbaar. Combo Cleaner is eigendom van en wordt beheerd door RCS LT, het moederbedrijf van PCRisk.com.
Beschrijving van trozr-eiwuy.deylaa12.workers.dev
This webpage appears to present itself as a Trezor Suite interface related to cryptocurrency wallet access and recovery. The page title references "Trezor Suite," and the screenshot shows a form asking visitors to restore a wallet using a mnemonic phrase, including fields for entering 12 to 33 recovery words. That type of prompt is associated with cryptocurrency wallet recovery workflows, but it is highly sensitive because seed phrases provide full access to wallet funds.
The domain itself is hosted on a workers.dev subdomain rather than an obvious official brand domain, which may indicate a custom page deployed on a cloud edge-hosting platform. Based on the branding shown in the screenshot, the page appears to imitate or reference the Trezor hardware-wallet ecosystem rather than operating as an independently branded service. No clear evidence in the provided data identifies the actual operator of this specific page.
Veiligheidsbeoordeling voor trozr-eiwuy.deylaa12.workers.dev
Multiple signals suggest elevated risk at the time of this scan. The site was categorized by multiple web-classification providers as phishing or fraud-related, and 11 out of 94 security engines flagged the URL. In addition, the screenshot shows a wallet recovery form requesting a mnemonic phrase, which is a common tactic used in cryptocurrency credential theft because recovery phrases can be used to take control of a wallet.
Although the malware scan did not detect malicious files and several blacklist databases did not list the site at the time of review, those findings do not outweigh the phishing-related indicators. The use of a cloud-hosted workers.dev subdomain, the Trezor branding, and the request for highly sensitive wallet recovery words together suggest the page may be attempting to impersonate a legitimate cryptocurrency service. Based on these findings, this website may pose potential risks to visitors.
Technische beschrijving
The site uses a valid TLS certificate issued by a mainstream certificate authority, is served through Cloudflare infrastructure, and resolves to an IP associated with Cloudflare hosting in Canada. The domain uses Cloudflare nameservers and appears to be deployed on a workers.dev subdomain, which is commonly used for edge-hosted applications and temporary web deployments.
DNSSEC appears to be unsigned, and the reported protocol details are incomplete. While the certificate is valid, HTTPS alone does not establish legitimacy. From a technical-risk perspective, the main concern is not transport security but the apparent collection of cryptocurrency recovery phrases through a branded interface that may not belong to the official service.
Deel uw ervaring met deze website. Was deze veilig? Bent u problemen tegengekomen?