trezor-suiteee[.]pages[.]dev

trezor-suiteee.pages.dev represents a case of brand impersonation targeting the trezor cryptocurrency platform. The domain hosted a fraudulent site mimicking the legitimate Trezor Suite | Secure Cryptocurrency Management interface to deceive users into providing sensitive information. This phishing attempt has been taken offline but highlights ongoing risks associated with trezor-suiteee.pages.dev and similar scam domains in the cryptocurrency space.

Analysis shows 2 of 95 VirusTotal vendors flagged the domain including Fortinet and Trustwave although Google Safe Browsing did not flag it. The registrar is Cloudflare, Inc. and the creation date is 2025-09-09 00:00:00. It resolves to the IP address 104.21.48.1 and appears on 1 security blocklist namely PhishDestroy. The SSL issuer is Google Trust Services / WE1 with the site using technologies such as HSTS Cloudflare and HTTP/3 while the IP is located in the US under AS13335 Cloudflare, Inc. The page title observed was Trezor Suite | Secure Cryptocurrency Management and the HTTP status returned 403 with nameservers kobe.ns.cloudflare.com and rosalyn.ns.cloudflare.com. Gridinsoft assigned a trust score of 0/100.

Individuals affected by this type of credential phishing should change passwords immediately enable two factor authentication on their accounts and remain vigilant for any signs of fraud. Reporting such domains to security organizations and blocklist providers like PhishDestroy assists in mitigating cryptocurrency related scams involving impersonation of brands like trezor.