terzor[.]pages[.]dev

The domain terzor.pages.dev has been identified as a brand impersonation threat, specifically targeting Trezor, and is currently offline. This domain was flagged due to its attempt to deceive users into believing it is associated with the legitimate brand.

PhishDestroy identifies that terzor.pages.dev was flagged by 4 of 95 VirusTotal vendors, indicating a notable level of suspicion, and it is registered through Cloudflare, Inc., resolving to the IP address 172.66.46.248. The domain was created on September 02, 2025, and appears on 1 security blocklist, further solidifying its malicious intent. Additionally, it utilizes an SSL certificate issued by Google Trust Services / WE1.

Given its current offline status, it is clear that efforts have been made to mitigate the threat posed by terzor.pages.dev. However, users are still advised to exercise caution when encountering similar domains, and it is recommended to verify the authenticity of websites before engaging with them, especially those related to financial services like Trezor. Regularly checking the security blocklists and being vigilant about brand impersonation attempts can significantly reduce the risk of falling victim to such scams.