info-en-trezor-login[.]pages[.]dev

This domain poses a significant brand impersonation threat, specifically targeting Trezor users by masquerading as a legitimate Trezor login page, which could lead to credential theft and financial loss.

The evidence against this domain is substantial, with 3 out of 95 security vendors on VirusTotal flagging it as malicious, and it has been registered through Cloudflare, Inc. since September 01, 2025, and is currently resolves to IP 172.66.45.33, furthermore, it appears on 1 security blocklist, indicating a notable risk level.

If users have visited this site, they should immediately assess their accounts for any suspicious activity, change their passwords, and enable two-factor authentication to prevent potential harm, as brand impersonation attacks can have severe consequences, and taking prompt action is crucial to minimize potential damage, PhishDestroy identifies such threats to protect users from brand impersonation attacks.