suits-web-treazr[.]pages[.]dev

The domain suits-web-treazr.pages.dev was created on March 22 2026 and is registered through Cloudflare, Inc. It resolves to the Cloudflare‑owned IP address 188.114.97.3, which is geolocated to Canada. The site served an HTTP 403 response and presented the page title “Official Trezor™ Suite® — Desktop”, indicating a direct attempt to mimic the official Trezor desktop application. The SSL certificate is issued by Google Trust Services under the WE1 profile, and the infrastructure employs HSTS, Cloudflare’s edge services and HTTP/3, consistent with a typical abuse of legitimate CDN resources.

Reputation checks show a Gridinsoft trust score of 0 / 100 and VirusTotal flagged the domain by 14 of 94 security vendors. The domain appears on a single security blocklist and is currently blocked by PhishDestroy. The page is categorized as a crypto‑scam that impersonates the Trezor brand, and the overall risk level is marked elevated.

Defenders should immediately block the domain and its associated IP at network perimeters, update URL filtering and DNS sinkhole rules, and monitor for any related CNAME or sub‑domain registrations that reference the same Cloudflare nameservers (aspen.ns.cloudflare.com, hal.ns.cloudflare.com). Continuous threat‑intel feeds should be consulted for any new detections, and incident response teams should treat any credential or seed‑phrase submissions to this site as compromised. The limited detection coverage (only one blocklist) suggests that broader threat‑intel sharing could improve early warning for similar brand‑impersonation campaigns.