apps-suit-trez-dqb[.]pages[.]dev

PhishDestroy identifies the domain apps-suit-trez-dqb.pages.dev as an active fake Trezor wallet phishing page designed to steal cryptocurrency credentials. The site mimics the official Trezor wallet interface to deceive victims into entering sensitive recovery phrases or private keys. Security researchers have flagged this domain as a confirmed phishing threat with potential for financial fraud. Users are advised to avoid interacting with this URL and verify any wallet-related domains through official Trezor channels before entering credentials.

This domain was flagged by 4 of 95 VirusTotal vendors, indicating it currently evades detection by major antivirus engines. It is registered through Cloudflare, Inc., resolves to IP 188.114.96.3, and operates under a Google Trust Services SSL certificate. The infrastructure appears newly established with minimal historical data, suggesting a short-lived campaign targeting unsuspecting users. Blocklist counts remain unverified due to its recent activation, but the absence of detections highlights the need for proactive threat hunting.

The domain remains active at the time of writing, with no confirmed takedown actions reported. Users should block the IP 188.114.96.3 at the firewall level and avoid accessing apps-suit-trez-dqb.pages.dev. If credentials were entered, immediately transfer remaining funds to a new wallet and revoke any exposed recovery phrases. Report the domain to Trezor’s abuse team and update password managers to block future access. Exercise caution with any unsolicited wallet-related communications.