trezor-suite--logiin[.]godaddysites[.]com

This domain is a high-risk brand impersonation site designed to deceive users of Trezor, a cryptocurrency hardware wallet. The site presents itself as the official Trezor Suite login page, using identical branding, logos, and page titles to trick visitors into entering sensitive credentials. Once compromised, these credentials could allow attackers to gain unauthorized access to cryptocurrency wallets, leading to potential asset theft or further exploitation through crypto drainer scripts or other malicious payloads. Analysis indicates this domain was registered on June 15, 2026, through GoDaddy.com, LLC, and resolves to the IP address 13.248.243.5. The site is flagged by 14 out of 95 security vendors on VirusTotal, and it appears on three independent security blocklists. The SSL certificate is issued by GoDaddy.com, Inc., which does not validate the site's legitimacy. The page title, 'Trezor® Suite® - The official wallet,' is a direct attempt to mimic the authentic Trezor interface, a tactic commonly used in credential theft campaigns targeting cryptocurrency users. If you visited trezor-suite--logiin.godaddysites.com or entered any information on the site, immediate action is required. Disconnect the device from the internet to prevent further data transmission. Reset all credentials associated with cryptocurrency accounts, including wallet passwords and recovery phrases, using a secure, offline device. Monitor wallet activity for unauthorized transactions and consider migrating assets to a new wallet if compromise is suspected. Report the incident to relevant security teams and blocklists to aid in broader threat mitigation efforts.