treazursuiite[.]webflow[.]io

This domain, treazursuiite.webflow.io, is flagged for brand impersonation, specifically targeting the Trezor brand. The domain is designed to deceive users into believing they are interacting with the legitimate Trezor website, potentially leading to the compromise of sensitive information such as login credentials and personal data.

Analysis indicates that 12 out of 95 security vendors on VirusTotal flag this domain as malicious. The domain is registered through MarkMonitor, Inc., and was created on June 15, 2026. The domain appears on three security blocklists, including MetaMask, PhishDestroy, and SEAL. The SSL certificate is issued by Google Trust Services, which may lend a false sense of security to unsuspecting users. The domain resolves to the IP address 172.64.151.8, which could be part of a broader phishing infrastructure.

If users have visited this domain, they are advised to immediately change their Trezor account passwords and enable two-factor authentication (2FA) if not already in place. Users should also monitor their Trezor accounts for any unauthorized transactions or suspicious activities. It is recommended to report the incident to Trezor's official support channels and to use reputable security tools to scan their systems for any potential malware that may have been downloaded during the visit.