home-treezr-io-cdn[.]pages[.]dev

Analysis of home-treezr-io-cdn.pages.dev shows a newly registered domain (creation date 2026-04-02) hosted on Cloudflare infrastructure (nameservers jacob.ns.cloudflare.com, maleah.ns.cloudflare.com) and resolving to IP 188.114.97.3, located in Canada under Cloudflare, Inc. The site returns HTTP 200 and presents the page title "Trezor.io - Protect Your Crypto with Cold Wallet Security," while the declared brand target is Google, indicating a brand‑impersonation campaign. The TLS certificate is issued by Google Trust Services / WE1, which may be used to lend credibility to the page. Gridinsoft assigns a trust score of 0/100, and the domain appears on a single security blocklist, currently blocked by PhishDestroy. VirusTotal has scanned the domain with 94 vendors and reported no detections, but this absence does not confirm safety. The available intelligence does not include details of credential‑capture mechanisms, payloads, or malicious redirects; only the title and registration metadata are known. Given the alignment with a known brand impersonation pattern, defenders should treat the domain as hostile, enforce network‑level blocking, monitor DNS queries for the IP address, and consider adding the domain to internal blocklists. Ongoing observation is advised to detect any evolution of the site’s behavior or emergence of additional indicators.