Phishing detection: trezor-hardware-login.square.site
Trezor Screenshot
No screenshot available yet
Captured automatically on the next refresh cycle
Investigate
Domain
trezor-hardware-login.square.site0 CT hosts on apex
urlscan
VirusTotal
Whois
IP
74.115.51.4
ipinfo
Greynoise
URL
https://trezor-hardware-login.square.site
Phishunt analysis Beta
41
high suspicion likely_phishingheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +3.7 Brand in domain label
- +3.4 Cert reuse
- +3.4 Shared IP cluster
- +3.0 OpenPhish
- +3.0 PhishTank
- +2.2 Country mismatch
- +1.6 Young domain
- +1.6 Favicon (kit)
- +1.1 No CSP header
- +0.8 Brand + login token
- +0.6 Long domain
- +0.6 Suspicious TLD
- +0.3 Free CA
- +0.2 Hyphens
- +0.1 External scripts
- +0.1 Deep subdomain
22 signals fired · detector v3.0.0
AI analysis AIBeta
Crypto scam
A Trezor hardware login page is built on a Square Online (Weebly) subdomain, combining the brand with login wording. It is listed in OpenPhish and appears to target hardware wallet owners to steal recovery phrases or credentials.
Brand + login tokenBrand in domain labelOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-18 · confidence 80%
Domain & Network
Whois
Registrar
MarkMonitor Inc.
Network
IP
74.115.51.4
Country
United States
United States
Hosting
Weebly, Inc.
ASN
AS27647
TLS Cert
YE1
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists