trezor-suite-swe[.]pages[.]dev

PhishDestroy has identified trezor-suite-swe.pages.dev as a confirmed brand impersonation phishing site with an elevated risk level. This domain masquerades as a legitimate Trezor Suite download page, using the title 'Trezor Suite Download (2025 Latest) — FileHorse Style Landing' to trick users into believing they are accessing an official source. The threat is specific to cryptocurrency wallet users, aiming to steal private keys or seed phrases by presenting a fake software download interface.

Technical analysis reveals that the domain was registered on September 09, 2025 through Cloudflare, Inc., and resolves to IP address 172.66.47.166. VirusTotal data shows that 10 out of 95 security vendors flag this domain as malicious, indicating a high confidence in its nefarious nature. It also appears on at least one security blocklist. The SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of legitimacy. However, the domain has been taken offline as of the latest check, which is a positive development.

Users who may have interacted with this domain should immediately run a full antivirus scan and change any passwords or cryptocurrency wallet credentials used on the site. If any sensitive information was entered, affected wallets should be considered compromised and funds moved to a new, secure wallet generated offline. To avoid such threats in the future, always verify the official domain for Trezor software (trezor.io) and use bookmarks rather than search engines to navigate to sensitive sites. Enable two-factor authentication on all cryptocurrency accounts and consider using hardware wallets for enhanced security.