tzer-suiter[.]pages[.]dev

The domain tzer-suiter.pages.dev is currently active and identified as a high-risk cryptocurrency phishing site. Analysis indicates it impersonates the official Trézor Suite, a desktop and web application for hardware wallets, with the intent to harvest user credentials and private keys. The page title, 'Official Trézor Suite — Desktop & Web App for Hardware Wallets,' directly mimics legitimate branding to deceive users into entering sensitive information. Infrastructure analysis reveals the domain is flagged by 2 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0 out of 100. It appears on 3 security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. The domain is registered through Cloudflare, Inc., and resolves to the IP address 172.66.47.136. The SSL certificate is issued by Google Trust Services, which may lend an appearance of legitimacy but does not mitigate the malicious intent of the site. Current status confirms the domain remains active and operational. Users are advised to immediately block access to 172.66.47.136 and tzer-suiter.pages.dev at the network level. Security teams should update endpoint protection rules to flag the domain and IP as malicious. Cryptocurrency users should verify all wallet-related communications via official channels only and enable multi-factor authentication where available. No legitimate wallet service will request private keys or recovery phrases through web forms.