logn--trezrio--eng-home[.]pages[.]dev

This domain presents a direct threat to cryptocurrency security by impersonating the official Trezor hardware wallet login interface. Visitors are shown a fraudulent page titled 'Trezor Login® | Starting Up Your Device®' designed to harvest wallet recovery seeds, passwords, and PINs. The site mimics legitimate device initialization procedures, increasing the likelihood of successful credential theft from users attempting to access their funds. Analysis indicates this infrastructure was deployed on April 4, 2026, through Cloudflare Pages hosting. The domain currently resolves to 188.114.96.3, a Cloudflare IP address located in Canada. VirusTotal detection shows 3 out of 95 security vendors have flagged this domain as malicious, while it appears on one security blocklist. The SSL certificate is issued by Google Trust Services (WE1), providing a false sense of legitimacy to potential victims. If you visited logn--trezrio--eng-home.pages.dev or entered any credentials, immediately disconnect the affected device from networks and power sources. Do not attempt to use any entered recovery seeds or passwords, as they should be considered compromised. Generate new wallet addresses using a verified Trezor device and official software, then transfer all remaining assets to these new addresses. Report the incident to your local cybercrime unit and to the legitimate Trezor security team for further remediation guidance.