trozr-eiwuy.deylaa12.workers.dev
Kategoria: Phishing
Aby korzystać z produktu z pełną funkcjonalnością, musisz kupić licencję na Combo Cleaner. Dostępny jest ograniczony siedmiodniowy bezpłatny okres próbny. Combo Cleaner należy do RCS LT i jest obsługiwany przez tę firmę, spółkę macierzystą PCRisk.com.
Opis trozr-eiwuy.deylaa12.workers.dev
This webpage appears to present itself as a Trezor Suite interface related to cryptocurrency wallet access and recovery. The page title references "Trezor Suite," and the screenshot shows a form asking visitors to restore a wallet using a mnemonic phrase, including fields for entering 12 to 33 recovery words. That type of prompt is associated with cryptocurrency wallet recovery workflows, but it is highly sensitive because seed phrases provide full access to wallet funds.
The domain itself is hosted on a workers.dev subdomain rather than an obvious official brand domain, which may indicate a custom page deployed on a cloud edge-hosting platform. Based on the branding shown in the screenshot, the page appears to imitate or reference the Trezor hardware-wallet ecosystem rather than operating as an independently branded service. No clear evidence in the provided data identifies the actual operator of this specific page.
Ocena bezpieczeństwa trozr-eiwuy.deylaa12.workers.dev
Multiple signals suggest elevated risk at the time of this scan. The site was categorized by multiple web-classification providers as phishing or fraud-related, and 11 out of 94 security engines flagged the URL. In addition, the screenshot shows a wallet recovery form requesting a mnemonic phrase, which is a common tactic used in cryptocurrency credential theft because recovery phrases can be used to take control of a wallet.
Although the malware scan did not detect malicious files and several blacklist databases did not list the site at the time of review, those findings do not outweigh the phishing-related indicators. The use of a cloud-hosted workers.dev subdomain, the Trezor branding, and the request for highly sensitive wallet recovery words together suggest the page may be attempting to impersonate a legitimate cryptocurrency service. Based on these findings, this website may pose potential risks to visitors.
Opis techniczny
The site uses a valid TLS certificate issued by a mainstream certificate authority, is served through Cloudflare infrastructure, and resolves to an IP associated with Cloudflare hosting in Canada. The domain uses Cloudflare nameservers and appears to be deployed on a workers.dev subdomain, which is commonly used for edge-hosted applications and temporary web deployments.
DNSSEC appears to be unsigned, and the reported protocol details are incomplete. While the certificate is valid, HTTPS alone does not establish legitimacy. From a technical-risk perspective, the main concern is not transport security but the apparent collection of cryptocurrency recovery phrases through a branded interface that may not belong to the official service.
Podziel się swoimi doświadczeniami z tą witryną. Czy była bezpieczna? Czy wystąpiły jakieś problemy?