install-public-trzrsuite-web[.]pages[.]dev

The domain install-public-trzrsuite-web.pages.dev is a phishing site that impersonates the cryptocurrency brand Trezor. It poses a specific threat of brand impersonation, which can lead to financial loss or theft of personal information. The site is currently taken offline, but users should remain vigilant and avoid interacting with it.

install-public-trzrsuite-web.pages.dev was registered through Cloudflare, Inc. on September 23, 2025. The domain resolves to the IP address 188.114.96.3, which is located in CA (CloudFlare, Inc.). The SSL certificate is issued by Google Trust Services / WE1. According to VirusTotal, 2 of 95 security vendors flag this domain, and it appears on 1 security blocklist, specifically PhishDestroy. The page title observed was 'Trezor Suite Latest Version Download – What’s New in the Update?'.

If users have interacted with install-public-trzrsuite-web.pages.dev, they should take immediate steps to protect their assets and personal information. For cryptocurrency-related scams, users should revoke any token approvals and move funds to a new, secure wallet. For credential or login phishing, users should change their passwords, enable two-factor authentication, and monitor their accounts for any signs of fraud. Additionally, users can report the domain to Trezor, their cryptocurrency exchange, and local authorities to help prevent further incidents.