support-trezor-login-auth[.]pages[.]dev

This domain, support-trezor-login-auth.pages.dev, poses a specific threat of brand impersonation, aiming to deceive users into believing they are interacting with the legitimate Trezor service. The domain is designed to mimic the official Trezor login page, potentially leading to unauthorized access to user credentials and other sensitive information.

Analysis indicates that support-trezor-login-auth.pages.dev has been flagged by 19 out of 95 security vendors on VirusTotal, suggesting a significant risk level. The domain was registered through Cloudflare, Inc. and was created on September 10, 2025. It resolves to the IP address 172.66.44.153 and currently appears on 2 security blocklists. The SSL certificate is issued by Google Trust Services / WE1, which might lend a false sense of legitimacy to unsuspecting users.

Users who have visited support-trezor-login-auth.pages.dev are advised to immediately change their Trezor account passwords and enable two-factor authentication if not already in place. It is also recommended to monitor account activity for any unusual transactions and to report the incident to Trezor's official support channels. To avoid falling victim to similar scams, users should always verify the URL and look for official communication channels when logging in to their accounts.