eng-trexor-suites.b12sites.com

Trezor

http://eng-trexor-suites.b12sites.com Access site

Screenshot

Investigate

Domain eng-trexor-suites.b12sites.com80 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 52.22.145.238

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL http://eng-trexor-suites.b12sites.com

urlscan

Wayback

archive.today

Cert YE1

crt.sh

Censys

Google CT

Phishunt analysis Beta

29 low suspicionheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+4.5 Brand in title
+3.4 Shared IP cluster
+3.0 OpenPhish
+2.3 Cert reuse
+2.2 Country mismatch
+1.5 ASN reputation
+0.6 Long domain
+0.3 Free CA
+0.2 Hyphens
+0.2 Suspicious TLD
+0.1 External scripts
+0.1 Deep subdomain

16 signals fired · detector v3.0.0

AI analysis AIBeta

Crypto scam

Page on a free b12sites.com subdomain impersonating the Trezor hardware wallet, using a look-alike 'trexor' name in the host and title. Likely aims to harvest crypto wallet credentials or recovery data. Hosted on Amazon infrastructure and listed in OpenPhish.

OpenPhishBrand in titleKeyword match

AI-generated from stored detector signals - the AI never visited the site. · 2026-10-14 · confidence 70%

Domain & Network

Whois

Registrar Amazon Registrar, Inc.

Network

IP 52.22.145.238 AWS EC2

Country