trezor-9s7[.]pages[.]dev

The domain trezor-9s7.pages.dev is a confirmed phishing site engaged in brand impersonation targeting Trezor, a cryptocurrency hardware wallet provider. It posed an elevated risk as a cryptocurrency scam designed to deceive users into disclosing sensitive information or transferring funds under false pretenses. As of the latest verification, trezor-9s7.pages.dev has been taken offline and no drainer kit was identified.

Technical indicators confirm the malicious nature of trezor-9s7.pages.dev. The domain was flagged by 1 of 95 VirusTotal security vendors, including Phishing Database, and appeared on 1 security blocklist (PhishDestroy). It was registered through Cloudflare, Inc. on March 17, 2026, and resolved to the IP address 188.114.96.3, hosted by Cloudflare in Canada. The SSL certificate was issued by Let's Encrypt (E8), and the observed page title was 'Trezor Master Practical Quiz - bit021'. Technologies detected included HSTS, Cloudflare, and HTTP/3, with a Gridinsoft trust score of 0/100. Google Safe Browsing did not flag the domain at the time of analysis.

Users who interacted with trezor-9s7.pages.dev should immediately revoke any token approvals granted during the session and transfer remaining funds to a new, secure wallet. Change all passwords associated with cryptocurrency accounts and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized transactions and report the incident to Trezor's official support channels. Additionally, victims may submit the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader mitigation efforts.