trezor-hardware-wallet-ggd[.]pages[.]dev

On July 25, 2026, the domain trezor-hardware-wallet-ggd.pages.dev was identified as a confirmed crypto scam impersonating Trezor, a well-known hardware wallet brand. The domain was registered through Cloudflare, Inc. and was hosted in the United States under the AS13335 Cloudflare, Inc. network. The domain resolves to the IP address 172.66.44.169. Analysis indicates that the site was taken offline, which is a common tactic used by threat actors to evade detection and further victimization.

The page title 'Trezor Model T - Hardware - Choose your wallet - Bitcoin' suggests a high level of sophistication in mimicking the legitimate Trezor brand, making it a plausible target for users seeking to purchase or manage their cryptocurrency wallets. The domain was flagged by PhishDestroy and appears on one security blocklist, reinforcing its malicious intent. The SSL certificate is issued by Google Trust Services, which may have initially lent a false sense of security to users. The domain was created on February 21, 2026, and the infrastructure analysis reveals the use of HSTS, Cloudflare, and HTTP/3 technologies, further complicating detection and mitigation efforts.

ScamAdviser and Gridinsoft trust scores for the domain are 41/100 and 0/100, respectively, indicating a significant level of distrust from these security assessment tools. The HTTP status code 403 suggests that the site is currently inaccessible, which can be due to the domain being taken offline or restricted by the hosting provider. Defenders should remain vigilant and monitor for any signs of the domain being reactivated. Additionally, users who have interacted with this domain should be alerted and advised to check their Trezor wallet for any signs of unauthorized access or transaction activity.