36f3cdd9[.]knfdjfhusurje[.]pages[.]dev

The domain 36f3cdd9.knfdjfhusurje.pages.dev has been identified as a brand impersonation threat targeting Trezor, a cryptocurrency hardware wallet. This phishing domain was designed to deceive users into believing they are accessing the legitimate Trezor Suite platform, aiming to steal sensitive credentials or cryptocurrency assets. The site was hosted through Cloudflare, Inc. and resolved to IP address 188.114.96.3, with a creation date of September 02, 2020.

Technical indicators from the intelligence report show that Google Safe Browsing flags the domain as phishing, and it appears on one security blocklist. VirusTotal analysis reveals that 13 out of 95 security vendors flag this domain as malicious, indicating a high-risk profile. The SSL certificate was issued by Google Trust Services (WE1), lending a false sense of legitimacy to the fraudulent page.

As of the latest check, the domain has been taken offline, reducing the immediate threat. However, users who may have interacted with the site should monitor their accounts for unauthorized activity and change any credentials entered. PhishDestroy recommends always verifying URLs directly with the official brand website before entering sensitive information, especially for cryptocurrency platforms like Trezor.