tezor-logon-cdn[.]pages[.]dev

This domain, tezor-logon-cdn.pages.dev, poses a direct threat to users by impersonating Trezor, a well-known cryptocurrency hardware wallet provider. The site presents itself as a legitimate guide or review page titled 'Trezor Wallet Review and Full Guide,' but its true purpose is to deceive visitors into divulging sensitive information, such as recovery phrases or private keys. Such information, if compromised, could lead to unauthorized access to cryptocurrency wallets and the irreversible loss of digital assets. The risk is particularly elevated for users unfamiliar with phishing tactics or those seeking official support resources. Analysis indicates that the domain was created on March 25, 2026, and is registered through Cloudflare, Inc. It resolves to the IP address 188.114.96.3, located in Canada and associated with Cloudflare's infrastructure. The domain's SSL certificate is issued by Google Trust Services (WE1), a common feature in both legitimate and malicious sites. However, the domain has been flagged by 17 out of 95 security vendors on VirusTotal, and it appears on at least one security blocklist. These indicators, combined with its recent creation date and the use of a content delivery network (CDN) to mask its origin, strongly suggest malicious intent. If you visited tezor-logon-cdn.pages.dev or interacted with its content, immediate action is required. First, disconnect the device used to access the site from the internet to prevent potential data exfiltration. Next, review all cryptocurrency wallet accounts for unauthorized transactions or changes, paying close attention to recovery phrases or private keys that may have been exposed. If any sensitive information was entered, assume it has been compromised and transfer assets to a new wallet with a fresh recovery phrase. Additionally, scan the device for malware using updated security tools, as phishing sites may deploy additional payloads. Finally, monitor accounts for suspicious activity and report the incident to relevant security teams or platforms for further investigation.