io-strart-trezer-eng[.]pages[.]dev

The domain io-strart-trezer-eng.pages.dev was identified as a phishing infrastructure specifically designed for brand impersonation targeting Trezor, a cryptocurrency hardware wallet provider. The domain is currently offline, though prior analysis confirms its malicious intent and operational status during the investigation period. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. and resolved to the IP address 172.66.44.222. It was flagged by 11 of 95 security vendors on VirusTotal, indicating widespread detection of its malicious nature. Additional technical indicators include a Gridinsoft trust score of 0/100 and presence on one security blocklist. The domain was created on May 06, 2026, though this date may reflect spoofed or manipulated registration data. Detected technologies include HSTS, Cloudflare, and HTTP/3, with an SSL certificate issued by Google Trust Services. The page title, io-strart-trezer-eng.pages.dev, further suggests an attempt to mimic legitimate Trezor communication channels. Current status confirms the domain has been taken offline, though the underlying infrastructure remains a potential risk for future malicious activity. Organizations and users are advised to block the domain and associated IP address at the network level. Security teams should monitor for similar impersonation attempts, particularly those leveraging Cloudflare-hosted pages with cryptocurrency-related branding. Users should verify all communications through official Trezor channels and avoid interacting with unsolicited links or prompts requesting sensitive information. Given the elevated risk level, immediate action is recommended to prevent potential credential theft or financial loss.