logn-trozo-io-en-usa[.]pages[.]dev

This domain constitutes a high-risk brand impersonation threat specifically targeting Trezor cryptocurrency wallet users. Analysis indicates the infrastructure was designed to mimic the official Trezor Suite interface, as evidenced by the page title 'Secure Your Crypto with Trezor Suite.' The fraudulent site likely aimed to harvest wallet credentials, recovery seeds, or other sensitive authentication details from unsuspecting users attempting to access their crypto assets. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered on June 15, 2026, through Cloudflare, Inc., and resolves to the IP address 172.66.45.28. Security vendors have flagged this domain in 11 out of 95 VirusTotal engines, while it appears on three distinct security blocklists. Additional detections include blocking by MetaMask, PhishDestroy, and SEAL, further corroborating its malicious classification. The SSL certificate issued by Google Trust Services and the presence of HSTS and HTTP/3 protocols suggest an attempt to appear legitimate while obfuscating detection. Users who visited logn-trozo-io-en-usa.pages.dev should assume potential compromise of any credentials or sensitive data entered. Immediate actions include revoking access to any connected wallets, generating new wallet addresses, and monitoring for unauthorized transactions. If recovery seeds or private keys were exposed, migrating funds to a new wallet is strongly recommended. Users should also scan their devices for malware and review browser extensions for unauthorized modifications. This domain has been taken offline, but similar threats may persist; verifying URLs against official sources before interaction remains critical.