Phishing detection: start-io-trezo.b12sites.com
Trezor Screenshot
Investigate
Domain
start-io-trezo.b12sites.com80 CT hosts on apex
urlscan
VirusTotal
Whois
IP
52.22.145.238
ipinfo
Greynoise
URL
https://start-io-trezo.b12sites.com
Phishunt analysis Beta
29
low suspicionheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +4.1 Site cluster
- +3.0 OpenPhish
- +2.2 Country mismatch
- +1.7 Shared IP cluster
- +1.5 ASN reputation
- +1.1 Cert reuse
- +0.6 Long domain
- +0.3 Free CA
- +0.2 Hyphens
- +0.2 Suspicious TLD
- +0.1 External scripts
- +0.1 Deep subdomain
16 signals fired · detector v3.0.0
AI analysis AIBeta
Crypto scam
Trezor lookalike on a b12sites website-builder subdomain with a 'start' style hostname mimicking the Trezor setup flow. It is listed in OpenPhish and reuses resources seen in other detections, likely targeting wallet seed phrases or credentials.
Shared page assetsOpenPhishBrand in title
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-13 · confidence 75%
Domain & Network
Whois
Registrar
Amazon Registrar, Inc.
Network
IP
52.22.145.238 AWS EC2
Country
United States
United States
Hosting
Amazon.com, Inc.
ASN
AS14618
TLS Cert
YE1
External detection
OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Network / ASN
Amazon.com, Inc.
Registrar
Amazon Registrar, Inc.
Submit to blocklists