trezor-log-usa-guide.square.site
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of trezor-log-usa-guide.square.site
This domain appears to be a page hosted on Square/Weebly infrastructure that presents itself as a guide for accessing or setting up a Trezor cryptocurrency wallet. The page title and visible content repeatedly reference "Trezor Login" and "Trezor.io/start," and the text is framed as onboarding instructions for a hardware-wallet user. Based on the naming pattern and page copy, the site appears intended to attract users looking for Trezor-related login or setup information.
The domain itself is not the official trezor.io domain; instead, it uses a subdomain on square.site with added terms such as "log," "usa," and "guide." That structure, combined with branding references to a well-known cryptocurrency wallet provider, suggests the page may be attempting to resemble or borrow trust from the legitimate Trezor brand rather than operating as an independent, clearly identified informational resource.
The site appears to fall under the cryptocurrency category, with a likely emphasis on wallet access, onboarding, or account-related guidance. No clear evidence in the provided scan identifies the actual operator of this page, and the use of a hosted site-builder subdomain may make ownership less transparent to visitors.
Safety Assessment for trezor-log-usa-guide.square.site
This domain was flagged by 18 out of 91 security engines at the time of the scan, with many of those detections classifying it as phishing or otherwise malicious. In addition, the domain closely resembles trezor.io in plain language and may be a look-alike intended to capture traffic from users seeking the official Trezor website. The page content also heavily references the Trezor brand and official start URL, which increases the risk of brand impersonation or credential-targeting behavior.
Other signals are mixed but do not outweigh the phishing concerns. The malware file scan did not detect malicious files at the time of analysis, and major content-focused threat databases listed in the scan were otherwise clean. However, the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting. The site also lacks a traffic ranking and shows additional contextual red flags in the similarity analysis.
Taken together, the strongest indicators here are the multi-engine phishing consensus, the close resemblance to a known cryptocurrency brand domain, and the page's apparent attempt to present itself as an official Trezor-related resource while using an unrelated hosted subdomain. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Weebly/Square infrastructure and appears to be served behind Cloudflare, with the server IP resolving to 74.115.51.5 in Oakland, United States. It uses a valid Let's Encrypt SSL certificate that was valid at the time of the scan and set to expire in August 2026. DNSSEC appears to be unsigned.
From a technical standpoint, the page does not show embedded malicious files or flagged external links in the provided malware scan, and no iframes were reported. However, the use of a generic site-builder subdomain for a page that references a well-known cryptocurrency wallet brand may be a security concern from an impersonation perspective, even when the TLS setup itself appears standard.
Share your experience with this website. Was it safe? Did you encounter any issues?