Phishing detection: trezoriostarts.godaddysites.com
Trezor Screenshot
Investigate
Domain
trezoriostarts.godaddysites.com1025 CT hosts on apex
urlscan
VirusTotal
Whois
IP
13.248.243.5
ipinfo
Greynoise
URL
https://trezoriostarts.godaddysites.com
Phishunt analysis Beta
31
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +3.0 OpenPhish
- +2.3 Cert reuse
- +2.2 Country mismatch
- +1.7 Shared IP cluster
- +1.1 ASN reputation
- +0.7 Unrecognised DNS provider
- +0.6 Long domain
- +0.6 Login text in screenshot
- +0.2 Suspicious TLD
- +0.1 External scripts
- +0.1 Deep subdomain
19 signals fired · detector v3.0.0
AI analysis AIBeta
Crypto scam
Impersonates the Trezor cryptocurrency wallet on a free GoDaddy website builder page, likely attempting to steal wallet recovery phrases. Confirmed by OpenPhish. Shares IP infrastructure with other Trezor phishing sites in the same campaign cluster.
OpenPhishPaaS hostKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-13 · confidence 80%
Domain & Network
Whois
Registrar
GoDaddy.com, LLC
Network
IP
13.248.243.5
Country
United States
United States
Hosting
Amazon.com, Inc.
ASN
AS16509
External detection
OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Network / ASN
Amazon.com, Inc.
Submit to blocklists