suite-----trezrrrr[.]pages[.]dev

The domain suite-----trezrrrr.pages.dev is a phishing site engaged in brand impersonation targeting Trezor, a cryptocurrency wallet provider. It presents itself as the legitimate Trezor Suite platform to deceive users into entering sensitive credentials or wallet information, posing an elevated risk of cryptocurrency theft. No drainer kit was identified, but the site was confirmed to be a scam before being taken offline.

Technical indicators confirm the malicious nature of suite-----trezrrrr.pages.dev. As of analysis, 2 of 95 VirusTotal security vendors flagged the domain, including LevelBlue and Phishing Database. The domain was registered through Cloudflare, Inc. on September 25, 2025, and resolved to the IP address 172.66.44.232, hosted by Cloudflare in Canada. It appeared on one security blocklist (PhishDestroy) and used an SSL certificate issued by Google Trust Services (WE1). The observed page title, 'Trezor Suite – Securely Manage Your Cryptocurrency Wallet,' closely mimicked the legitimate Trezor interface. Technologies detected included HSTS, Cloudflare, and HTTP/3, while the current HTTP status returned a 403 error.

Users who interacted with suite-----trezrrrr.pages.dev should immediately revoke any token approvals and transfer cryptocurrency funds to a new, secure wallet. Enable two-factor authentication (2FA) on all accounts and monitor for unauthorized transactions. Report the phishing domain to the impersonated brand (Trezor) and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts.