trezorsecure.framer.ai
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of trezorsecure.framer.ai
This domain appears to host a cryptocurrency-themed landing page built on Framer's hosted infrastructure. The page title and visible content reference "Trezor.io/start" and present setup guidance, wallet security tips, recovery-seed handling advice, and general information about managing a hardware crypto wallet. Based on the screenshot, the site is not presenting itself as a broad corporate website, but rather as a focused informational page centered on Trezor-branded wallet onboarding content.
The domain itself is trezorsecure.framer.ai, which is a subdomain under Framer's platform rather than an official-looking Trezor-owned domain. That mismatch matters because the page content repeatedly references Trezor branding while being hosted on a third-party site builder domain. Based on the available page text and metadata, the operator is not clearly identified on-page, so ownership and authorization for using the Trezor name are not evident from this scan alone.
Safety Assessment for trezorsecure.framer.ai
Several security signals indicate elevated risk at the time of this scan. The domain was flagged by 14 out of 91 security engines, with many of those detections classifying it as phishing. In addition, one threat database listing was present for phishing-related activity, and the page content uses Trezor branding while operating from a Framer-hosted subdomain rather than an apparent official Trezor domain. That combination may indicate a look-alike page intended to imitate a well-known cryptocurrency wallet brand.
The malware scan did not report confirmed malicious files, although it did attach a generic suspicious heuristic to the domain and homepage URL. A DNS-based mail-reputation blocklist also listed the server IP, which is a weaker signal than direct phishing detections but still adds minor caution. The page's sparse, generic instructional content and the absence of clear operator identification further increase uncertainty.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate expiring in July 2026, which means traffic to the page can be encrypted in transit, but certificate validity alone does not verify legitimacy. The server appears to be hosted by Framer B.V on IP address 31.43.160.6 in Amsterdam, with the web server identified as Framer/2ea93c3. The domain is relatively old at about 8 years, though in this case the scanned host is a Framer subdomain rather than a standalone brand-owned domain.
DNSSEC appears to be unsigned, so DNS responses do not benefit from DNSSEC validation. No malicious files were identified in the limited file scan, but the domain received multiple phishing detections from security engines and a generic suspicious heuristic in the malware scan. The use of a third-party hosted subdomain for Trezor-branded content is a notable technical and trust concern.
Share your experience with this website. Was it safe? Did you encounter any issues?