web-en-suite-help[.]pages[.]dev

The domain web-en-suite-help.pages.dev is identified as a high-risk brand impersonation threat targeting Trezor, a cryptocurrency hardware wallet provider. Analysis indicates the site masquerades as the official Trezor Suite platform, presenting a page titled 'Trezor Suite | Manage Your Crypto Securely' to deceive users into disclosing sensitive credentials or installing malicious software. The domain is currently offline, though prior activity suggests intent to facilitate cryptocurrency theft or credential harvesting. Infrastructure analysis reveals the domain was registered on April 24, 2026, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. Security vendor detections include 12 of 95 flags on VirusTotal, with Google Safe Browsing categorizing it under 'SOCIAL_ENGINEERING.' The domain appears on one security blocklist and is blocked by PhishDestroy. Additional technical indicators include the use of HTTP/3, HSTS, and a valid SSL certificate issued by Google Trust Services. Gridinsoft assigns a trust score of 0/100, reinforcing its malicious classification. Given the domain's current offline status, immediate threat exposure is mitigated. However, organizations and users should remain vigilant for similar impersonation attempts. It is recommended to block the domain and associated IP (188.114.97.3) at the network level, update endpoint protection rules to include this indicator, and monitor for renewed activity under related infrastructure. Users should verify the legitimacy of any Trezor-related communications by accessing the official website directly and never entering credentials on untrusted platforms.