eng-suit-use[.]pages[.]dev

The domain eng-suit-use.pages.dev is identified as a brand_impersonation threat with an elevated risk level. It specifically targets Trezor, a cryptocurrency hardware wallet provider, by mimicking its official application interface. The domain is currently offline, but prior activity indicates malicious intent to deceive users into disclosing sensitive credentials or installing unauthorized software. Analysis of the domain reveals it was registered through Cloudflare, Inc. on September 23, 2025, and resolved to the IP address 172.66.44.230. Security vendors on VirusTotal flagged the domain, with 6 out of 95 detecting it as malicious. The domain also appears on one security blocklist. The SSL certificate is issued by Google Trust Services (WE1), and the page title was recorded as 'Trezor Suite – Official App® with handing,' further indicating an attempt to impersonate legitimate Trezor services. The domain has since been taken offline, but users who may have interacted with it should assume potential exposure. It is recommended to verify all cryptocurrency-related applications through official channels only, monitor accounts for unauthorized transactions, and revoke access to any suspicious browser extensions or installed software linked to this domain. Network administrators should block the domain and associated IP address in perimeter defenses to prevent future access attempts.