Author

Topic: {Warning}: Fake Trezor pops up in Google (Read 290 times)

copper member
Activity: 2142
Merit: 1305
Limited in number. Limitless in potential.
November 10, 2019, 12:19:29 PM
#19
EDIT: changing my adguard to uBlock Origin. uBlock blocked it completely. Thanks
Ye, but you or anyone should not be dependent on uBlock or any adblockers, people should be aware of any scheme and tricks used by these scammers and hackers around the internet.
hero member
Activity: 2128
Merit: 532
FREE passive income eBook @ tinyurl.com/PIA10
November 10, 2019, 07:58:02 AM
#18
docs.google.com as a Trezor website?

Wut
legendary
Activity: 2366
Merit: 2054
November 09, 2019, 09:53:33 PM
#17
You can bookmark the official page, https://trezor.io/.
When write it back, We Should double check it before push enter button
like today I make typo, when writing trezor to wroten tresor
Code:
https://tresor.io/





Domain information :

Code:
Domain Name: TRESOR.IO
Registry Domain ID: D503300000056100639-LRMS
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: www.namecheap.com
Updated Date: 2018-11-14T21:36:54Z
Creation Date: 2017-12-12T22:26:42Z
Registry Expiry Date: 2019-12-12T22:26:42Z
Registrar Registration Expiration Date:
Registrar: NameCheap, Inc
Registrar IANA ID: 1068

Look 2 years old and nobody going report
full member
Activity: 1176
Merit: 162
November 09, 2019, 09:48:46 PM
#16
~
Thanks for the info, Tried it and found the same, this is alarming why google allow this kind of malicious attempt without reviewing the ads first.
I guess this is not only on trezor maybe some exchanges and another well-known wallet too. Pretty much the same on google playstore fake app, scammers duplicate any app so we need to check the uploader every time.


That's how competent google on their so called restrict crypto ad policy. Basically, they just accept any crypto ads without even scanning or researching about the ad, they just want money.

If anyone who don't want to get any ads, on website or even on search engines, just use ad blocker, I recommend uBlock Origin for chrome, firefox and some chromium based browser.
I have Adguard  ad blocker, ads like that can't be blocked, testing uBlock Origin now.

EDIT: changing my adguard to uBlock Origin. uBlock blocked it completely. Thanks
hero member
Activity: 1414
Merit: 516
November 09, 2019, 08:59:12 PM
#15

No, they don't they mostly approved by a bot I have experienced on using Google ads I'm sure they are abusing the free $100 coupon to advertise the fake copy of trezor website. Google will take action if someone reported it but if not the ads are free to stay at the top. So people should report this fake trezor if they found it while searching so that Google will do a manual check.



It seems they keep changing the domain from time to time look at this new domain below.



These two are connected:
Code:
www.trezor.center
https://trezor.promo/

If you click the ads with trezor[.]center they will redirect you to trezor[.]promo.

I believe that they are using "Cloacking" it's a blackhat method where they're hiding the real domain and they also collecting many IPs.
They will use the collected IPs in the future if their domain is ban or reported they will make a new domain they will use the collected IP's to redirect them to another website just like what happen to DroomieChikito he redirects to a different website.

As i see all this redirects me to this scam site
Code:
https://wallet.trezcr.com/#/

And the scammers ask for the seed, hope soon someone will detect what is the IP who host the website and contact authorities to catch these guys.
legendary
Activity: 3374
Merit: 3095
Playbet.io - Crypto Casino and Sportsbook
November 09, 2019, 03:49:14 PM
#14
Google or any search engine provider should do a check first before they put the ads. Sadly most of them just want the money and left the DD to the users.
I'm sure they check, but with lack of knowledge of advertised product or service, i doubt they can identify all scam/malicious ads.

No, they don't they mostly approved by a bot I have experienced on using Google ads I'm sure they are abusing the free $100 coupon to advertise the fake copy of trezor website. Google will take action if someone reported it but if not the ads are free to stay at the top. So people should report this fake trezor if they found it while searching so that Google will do a manual check.



It seems they keep changing the domain from time to time look at this new domain below.



These two are connected:
Code:
www.trezor.center
https://trezor.promo/

If you click the ads with trezor[.]center they will redirect you to trezor[.]promo.

I believe that they are using "Cloacking" it's a blackhat method where they're hiding the real domain and they also collecting many IPs.
They will use the collected IPs in the future if their domain is ban or reported they will make a new domain they will use the collected IP's to redirect them to another website just like what happen to DroomieChikito he redirects to a different website.
sr. member
Activity: 2030
Merit: 356
November 09, 2019, 02:18:54 PM
#13
I also note this now but only if i search on desktop mode from phone, i report it, hope new people to crypto will not fall on this scam/phising attemp


Other than reporting to google only, we should also inform to trezor through support or by email etc that there is some phishing attempt related to their site. This way they can publish this on their official twitter handle and people can be inform about this scam.
hero member
Activity: 1414
Merit: 516
November 09, 2019, 02:02:33 PM
#12
I also note this now but only if i search on desktop mode from phone, i report it, hope new people to crypto will not fall on this scam/phising attemp

copper member
Activity: 2142
Merit: 1305
Limited in number. Limitless in potential.
November 09, 2019, 01:32:11 PM
#11
I have reported it but seriously whats wrong with the google ads.  They are showing the scam site on the top  Shocked

That's how competent google on their so called restrict crypto ad policy. Basically, they just accept any crypto ads without even scanning or researching about the ad, they just want money.

If anyone who don't want to get any ads, on website or even on search engines, just use ad blocker, I recommend uBlock Origin for chrome, firefox and some chromium based browser.
member
Activity: 69
Merit: 10
November 09, 2019, 11:29:27 AM
#10
For those beginners/newbies,

If you used Google to search for hardware wallets such as Trezor, just be careful because there's a lot of ads popping in the first page which is either a fake or a phishing site. Please be careful.

You can bookmark the official page, https://trezor.io/.



I urged everyone to report it here: https://support.google.com/google-ads/contact/vio_other_aw_policy

As you can see the first four links are Ads Labeled by [Ad] and the fifth link is the real website.
Whenever you search for a specific site, ignore the links which are marked as Ads in the google search.
sr. member
Activity: 1022
Merit: 280
November 09, 2019, 11:23:21 AM
#9
For those beginners/newbies,

If you used Google to search for hardware wallets such as Trezor, just be careful because there's a lot of ads popping in the first page which is either a fake or a phishing site. Please be careful.

You can bookmark the official page, https://trezor.io/.

I urged everyone to report it here: https://support.google.com/google-ads/contact/vio_other_aw_policy

I have reported it but seriously whats wrong with the google ads.  They are showing the scam site on the top  Shocked
Anyways we should double check all the sensitives sites, before performing any activity on them to avoid getting scammed by these phishing sites.
legendary
Activity: 2170
Merit: 1789
November 09, 2019, 10:45:29 AM
#8
When there are more than 4 websites saying they're the official website, most people should've realized that they're fake.

Google or any search engine provider should do a check first before they put the ads. Sadly most of them just want the money and left the DD to the users.
legendary
Activity: 2366
Merit: 2054
November 09, 2019, 06:30:17 AM
#7
Found similar like OP today



I don't think so what for they make ads "Trezor.io | Trezor (Official) | The Original Hardware Wallet" ‎.
When I visiting that site isn't direct to phishing trezor website.



I did try to Scaning https://www.virustotal.com/gui/url/217f4e849bbeff2dfcf8d19949bf721c987c8b94ce8118cfcecd1f9c4fa34f58/detection
and found Forcepoint ThreatSeeker - Suspicious

Code:
Domain name:TREZBR.GQ
Organisation:
Equatorial Guinea Domains B.V.
Dominio GQ administrator
P.O. Box 11774
1001 GT Amsterdam
Netherlands
Phone: +31 20 5315725
Fax: +31 20 5315721
E-mail: abuse: [email protected], copyright infringement: [email protected]

Domain Nameservers:
ALEXIS.NS.CLOUDFLARE.COM
GRACE.NS.CLOUDFLARE.COM


legendary
Activity: 2324
Merit: 1604
hmph..
November 08, 2019, 06:29:30 PM
#6
Maybe avoid using google as your search engine as a precaution  Grin

This doesn't guarantee using Duckduckgo, start page and other search engines to avoid fake sites. I had experience about it few months ago when I'm trying to use keywords using "bitcointalk new bounty" and here is an example. The most important think is double check search results before click pages. Knowledge about official sites is important, so we can skip any search results not from the official site.
hero member
Activity: 1750
Merit: 589
November 08, 2019, 12:23:31 PM
#5
This has been said and will be said a lot of times now upto the future, never trust pop up sites and windows, as much as possible ignore it so you could completely avoid it and be victimized by it. If you're really into uaing the site, evaluate carefully everything and if something seems off then don't ignore your gut feels and try veryfying if the site is fake or not. Make sure to only get application links at official community of the softwares and/or buy a licensed one.
sr. member
Activity: 1372
Merit: 264
November 08, 2019, 05:42:19 AM
#4
That's really bad and it reallt needs a caution for new buyers. They will surely confused if its legit or not and google should not show this fake website.

If there is an ads avoid it or use an adblocker and only visit a legit and official website of trezor.
sr. member
Activity: 1064
Merit: 265
Vave.com - Crypto Casino
November 08, 2019, 03:53:11 AM
#3
Common issue in Google. You can report that ads.they are paying Google to be in 1st position.only newbies will fall in this scam. 1year ago i searched MEW then saw fake website in the 1st page (paid). Better to avoid ads link and report that ad.BTW this post will Help who don't know the real websites.         
legendary
Activity: 2114
Merit: 1150
https://bitcoincleanup.com/
November 08, 2019, 02:41:30 AM
#2
Maybe avoid using google as your search engine as a precaution  Grin

I tried the same search but using duckduckgo and this is what appeared:

legendary
Activity: 2576
Merit: 1655
November 07, 2019, 06:28:41 PM
#1
For those beginners/newbies,

If you used Google to search for hardware wallets such as Trezor, just be careful because there's a lot of ads popping in the first page which is either a fake or a phishing site. Please be careful.

You can bookmark the official page, https://trezor.io/.



I urged everyone to report it here: https://support.google.com/google-ads/contact/vio_other_aw_policy
Jump to: