assets-start-io.square.site
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of assets-start-io.square.site
This domain is a page hosted on the Square/Weebly site-building platform rather than an official standalone brand domain. Based on the page title, metadata, and screenshot, it appears to present itself as a Trezor-branded cryptocurrency onboarding or product page, using language such as "Trezor.io/Start" and promoting crypto wallet setup, trading, sending, receiving, and asset security.
The content and branding suggest the page is attempting to attract users interested in cryptocurrency hardware wallets and related financial services. However, the actual hostname is assets-start-io.square.site, which does not match Trezor's primary brand domain naming. The site appears to be operated through a hosted website builder environment, with assets served from Weebly/Square infrastructure and related support domains.
Safety Assessment for assets-start-io.square.site
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 12 out of 91 security engines, with several classifying it as phishing or fraud-related, and multiple web-classification sources also associated it with phishing or financial-services abuse. In addition, the page visually presents Trezor branding and references "Trezor.io/start" while being hosted on a square.site subdomain, which may indicate a look-alike page designed to imitate a well-known cryptocurrency brand.
The malware scan did not detect malicious files in the sampled page resources, and major content-malware threat databases listed here were clean at the time of this scan. However, that does not outweigh the broader phishing consensus from multiple security engines. The domain's IP address was also listed on one mail-reputation blocklist, which is a weaker signal on its own but adds a small amount of caution.
Given the combination of multi-engine phishing detections, brand-mimicking presentation, and the mismatch between the displayed brand and the actual hosted domain, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate with expiry shown as 2026-08-05, and it appears to be served through Cloudflare-facing web infrastructure while hosted on Weebly/Square systems. The domain resolves to IP address 74.115.51.4, and referenced resources include Weebly/Square and related CDN assets. DNSSEC is unsigned, which is common but means DNS responses do not appear to have DNSSEC validation protection.
From a technical standpoint, the page does not show file-based malware in the limited scan sample, and no flagged external links or iframes were reported. The main concern is not the TLS setup but the apparent misuse of a legitimate hosted-site platform to present branding associated with a different cryptocurrency service, which is a common pattern in phishing campaigns.
Share your experience with this website. Was it safe? Did you encounter any issues?