treizor-io-us[.]pages[.]dev

Analysis indicates that treizor-io-us.pages.dev is actively engaged in brand impersonation, posing as the legitimate Trezor Suite App. This malicious domain aims to deceive users into believing they are interacting with the official Trezor service, potentially leading to the theft of sensitive information such as login credentials or financial data.

Infrastructure analysis reveals that the domain was created on April 09, 2026, and is registered through Cloudflare, Inc. It is currently still active and resolves to the IP address 172.66.44.111, which is located in California, USA. The SSL certificate is issued by Google Trust Services / WE1, which could be a tactic to gain user trust. The domain has been flagged by 9 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. It also appears on one security blocklist, specifically blocked by PhishDestroy.

If users have visited treizor-io-us.pages.dev, they should immediately change their Trezor account passwords and any other passwords they may have used on the site. Users are advised to monitor their financial accounts for any unauthorized transactions and report any suspicious activity to Trezor support. Additionally, users should run a comprehensive security scan on their devices to detect and remove any potential malware that may have been installed during the visit. It is crucial to avoid clicking on any links or providing personal information to unverified websites in the future.