trzor-suite-iio[.]pages[.]dev

The domain trzor-suite-iio.pages.dev is a phishing site engaged in brand impersonation targeting Trezor, a cryptocurrency hardware wallet provider. It presents itself as the official Trezor Suite platform to deceive users into entering sensitive credentials or downloading malicious software, posing an elevated risk of cryptocurrency theft. No drainer kit was identified, but the site was confirmed to be a cryptocurrency scam. As of the latest verification, trzor-suite-iio.pages.dev has been taken offline.

Technical analysis reveals that trzor-suite-iio.pages.dev was flagged by 1 of 95 VirusTotal security vendors, including Phishing Database, and appears on 1 security blocklist (PhishDestroy). The domain was registered through Cloudflare, Inc. on September 23, 2025, and resolves to the IP address 172.66.44.230, hosted by Cloudflare in Canada. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Trezor Suite 2025 — Secure Setup, Features'. Technologies detected include HSTS, Cloudflare, and HTTP/3. Google Safe Browsing did not flag the domain at the time of assessment.

Users who interacted with trzor-suite-iio.pages.dev should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new, secure wallet. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the phishing domain to the impersonated brand (Trezor), the hosting provider (Cloudflare), and relevant authorities such as the Anti-Phishing Working Group (APWG) or local cybercrime units. Monitor financial and cryptocurrency accounts for unauthorized transactions.