a66eaedd[.]connewal-330[.]pages[.]dev

The domain a66eaedd.connewal-330.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No SSL certificate is presented for the site, indicating that the connection is not encrypted. The page title reported by crawlers is "Trezor Suite," directly referencing the Trezor brand, and the site is classified as a crypto‑related scam that impersonates the hardware‑wallet provider. Google Safe Browsing has flagged the domain for social engineering, and the site appears on a single security blocklist.

PhishDestroy has actively blocked the domain, confirming that it is being used for malicious purposes. VirusTotal analysis shows that 14 out of 93 security vendors have raised detections against the domain, reinforcing the suspicion of malicious activity. The site is currently offline, which limits immediate interaction but does not remove the associated risk.

Defenders should continue to block the domain at network perimeters, update threat intelligence feeds with the observed IP and registrar information, and monitor for any re‑hosting attempts that may reuse the same infrastructure. Additional investigation is warranted to determine whether the domain was used to host credential‑stealing forms or cryptocurrency‑draining scripts, as these details remain unverified. Continuous monitoring of Cloudflare‑hosted assets and rapid response to similar brand‑impersonation page titles are recommended to mitigate future exposures.