trezor--hardwware--wallet[.]pages[.]dev

This domain, trezor--hardwware--wallet.pages.dev, is identified as a brand impersonation threat targeting Trezor, a well-known hardware wallet brand. The threat is classified as high risk due to the potential for financial loss and the impersonation of a trusted brand, which can lead to unauthorized access to user credentials and cryptocurrency assets.

Analysis indicates that the domain has a VirusTotal detection score of 11/95, suggesting that a significant portion of security vendors recognize it as a threat. The domain is registered through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. It was created on June 15, 2026, and currently appears on 3 security blocklists. The SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of security to unsuspecting users.

The domain is currently offline, indicating that it may have been taken down by security measures or the campaign has ceased. Despite this, the infrastructure used remains a concern, and users should exercise caution if the domain becomes active again. The remaining risk is high, as the domain could be reactivated at any time, and the impersonation of a trusted brand continues to pose a significant threat to potential victims. Users are advised to verify the authenticity of any Trezor-related websites through official channels and to avoid clicking on suspicious links or entering sensitive information on unverified sites.