io-trezo-starts.square.site
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of io-trezo-starts.square.site
This domain appears to be a page hosted on Square's website-building platform under the square.site subdomain structure. Based on the page title and meta description, it presents itself as a setup page for a Trezor cryptocurrency wallet, using branding and wording associated with device initialization and digital-asset security.
The visible page content is extremely minimal, showing the word "trezor" and a "Powered by Square" footer rather than a full-featured product or support site. That combination suggests the page may be attempting to imitate or reference a cryptocurrency hardware-wallet onboarding experience while being operated through a third-party site builder rather than an official brand-owned domain.
Because the domain is a Square-hosted subdomain rather than a primary corporate domain, visitors would typically need to verify independently whether it is genuinely affiliated with the brand it references. Based on the available content and naming pattern, the site appears to target users interested in cryptocurrency wallet setup or recovery flows.
Safety Assessment for io-trezo-starts.square.site
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 16 out of 91 security engines, with many of those detections classifying it as phishing or malicious. In addition, the page content and metadata reference a well-known cryptocurrency wallet brand while using a third-party square.site subdomain, which may indicate a look-alike page intended to capture trust from users seeking the official setup portal.
Other scan components were less conclusive: the malware scan did not detect flagged files, and major content-malice blacklist checks shown here were clean at the time of review. However, clean file scanning does not outweigh a broad multi-engine phishing consensus, especially for pages that may be designed primarily for credential theft or wallet-seed harvesting rather than malware delivery.
The page's sparse design, brand-referencing title, and hosting on a generic site-builder subdomain add to the concern. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Weebly/Square infrastructure behind a Cloudflare-served web server, resolving to IP address 74.115.51.4 in the United States. It presents a valid Let's Encrypt SSL certificate expiring in August 2026, which indicates encrypted transport but does not by itself confirm legitimacy. DNSSEC appears to be unsigned.
The domain has existed for several years, but the specific content appears to be delivered from a Square subsite rather than a dedicated official brand domain. The page references standard Square/Weebly assets and contains no flagged files or iframes in the provided scan, yet the main technical concern is reputational rather than exploit-based: a branded cryptocurrency-themed page on a third-party hosted subdomain that received substantial phishing detections from security engines.
Share your experience with this website. Was it safe? Did you encounter any issues?