desktop-logn-trezr[.]pages[.]dev

This domain, desktop-logn-trezr.pages.dev, is flagged for credential theft, posing a significant risk to users who may inadvertently enter their login credentials. The site impersonates the login page of a legitimate service, likely Trezor, to steal sensitive information.

Analysis indicates that the domain was created on September 01, 2025, and is registered through Cloudflare, Inc. The domain resolves to the IP address 2606:4700:310c::ac42:2c98, which is located in the United States and belongs to AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1, which can lend a false sense of security to unsuspecting users. According to VirusTotal, 10 out of 95 security vendors flag this domain as malicious, and it appears on one security blocklist, specifically PhishDestroy.

If a user has visited this site, it is crucial to take immediate action to secure their accounts. First, change the passwords for any accounts that were accessed using the credentials entered on the site, particularly those associated with Trezor or any other cryptocurrency wallets. Enable two-factor authentication (2FA) for an additional layer of security. Monitor account activity for any unauthorized transactions and report suspicious activity to the relevant service provider. It is also advisable to run a full system scan using reputable antivirus software to ensure no malware was installed.