tersre-oi-suiite[.]pages[.]dev

The domain tersre-oi-suiite.pages.dev is a confirmed phishing site engaged in brand impersonation targeting Trezor, a cryptocurrency wallet provider. It presents itself as the 'Official Trezor™ Suite — Desktop' to deceive users into entering sensitive information, posing an elevated risk of cryptocurrency theft. No drainer kit was identified, but the site was actively used for cryptocurrency-related scams before being taken offline.

Technical indicators confirm the malicious nature of tersre-oi-suiite.pages.dev. The domain was flagged by 2 of 95 VirusTotal vendors, including LevelBlue and Phishing Database, and appears on 1 security blocklist (PhishDestroy). Registered through Cloudflare, Inc. on January 20, 2026, it resolved to the IP address 188.114.97.3, hosted by Cloudflare in Canada. The SSL certificate was issued by Google Trust Services (WE1), and the site employed technologies such as HSTS, Cloudflare, and HTTP/3. At the time of analysis, the domain returned an HTTP 403 status, indicating it was no longer accessible.

Users who interacted with tersre-oi-suiite.pages.dev should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new, secure wallet. Enable two-factor authentication (2FA) on all cryptocurrency and financial accounts, and monitor for unauthorized transactions. Report the phishing domain to Google Safe Browsing, the impersonated brand (Trezor), and relevant security platforms such as PhishTank or OpenPhish to aid in mitigation efforts.