trezor-walet-click[.]pages[.]dev

This domain, trezor-walet-click.pages.dev, poses as an official Trezor cryptocurrency wallet interface to deceive users into entering sensitive credentials or seed phrases. The site is designed to harvest private keys, enabling attackers to drain digital assets from victims' wallets. The page title, 'Trezor® Wallet – Secure Bitcoin & Crypto Storage™,' closely mirrors legitimate branding to enhance credibility and trick users into believing they are interacting with a trusted service. Analysis indicates the domain was registered on April 09, 2026, through Cloudflare, Inc., and is currently offline. Security vendors on VirusTotal flagged the domain as malicious, with 12 out of 95 detections confirming its fraudulent nature. The site resolved to the IP address 188.114.96.3 and used an SSL certificate issued by Google Trust Services, a common tactic to appear legitimate. It also appeared on one security blocklist, further validating its malicious intent. If you visited trezor-walet-click.pages.dev or entered any information, immediately disconnect the device from the internet to prevent further data transmission. Revoke any wallet permissions granted during the interaction and transfer remaining assets to a new, secure wallet. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where possible. Report the incident to relevant security teams and consider notifying local cybercrime authorities to aid in tracking the infrastructure.