trzzr-strt-io[.]pages[.]dev

The domain trzzr-strt-io.pages.dev is assessed as a high-risk brand impersonation site targeting Trezor. This domain poses a significant threat by attempting to deceive users into believing they are interacting with the official Trezor hardware wallet setup page, potentially leading to credential theft.

Analysis indicates that this domain has been flagged by 14 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection by automated systems. The domain is registered through Cloudflare, Inc., and resolves to the IP address 188.114.96.3, which is located in California, USA, and is associated with Cloudflare's infrastructure. The domain was created on March 23, 2026, and has appeared on one known security blocklist. The SSL certificate is issued by Google Trust Services / WE1, which may provide a false sense of security to unsuspecting users. The page title, 'Trezor® Hardware Wallet Setup | Secure Your Crypto at Trezor.io/Start,' closely mimics the official Trezor site, further enhancing the impersonation.

To mitigate the risk of credential theft, users should be educated to only access Trezor hardware wallet setup pages through verified and official channels. Security teams should block the domain at the network level and monitor for any attempts to access it. Additionally, organizations should consider implementing DNS-based filtering solutions to prevent access to known malicious domains. Regularly updating phishing detection tools and maintaining a vigilant stance on email and web traffic is also crucial.