traezor-usa[.]pages[.]dev

PhishDestroy has flagged traezor-usa.pages.dev as an active brand impersonation threat targeting Trezor users. The domain mimics the official Trezor Suite® branding to deceive visitors into divulging sensitive cryptocurrency wallet credentials. This impostor site is currently unresolved and poses a credible risk to unsuspecting users seeking legitimate crypto management tools.

This domain was flagged with a risk level marked as under_investigation but remains actively accessible. VirusTotal currently shows 0 detections out of 95 scanners, indicating it has evaded immediate detection despite its malicious intent. The domain resolves to IP address 172.66.44.192 and leverages Google Trust Services for its SSL certificate, adding a false sense of legitimacy. Registered through Cloudflare, Inc., this page.dev subdomain exploits trusted infrastructure to host its phishing content. The page title, "Trezor Suite® — Securely Manage Your Crypto | Official Website," is an exact replica of the legitimate Trezor branding, further enhancing its deceptive appearance.

To mitigate exposure to this Trezor brand impersonation scam, users should verify the URL of any Trezor-related site by cross-referencing it with the official Trezor website (trezor.io) or checking for the presence of a valid SSL certificate issued to Trezor directly. Always access Trezor Suite through official channels, such as the Trezor website or verified app stores. Report suspicious domains to Trezor’s official security channels and avoid entering any sensitive information on untrusted sites. Blocking the IP address 172.66.44.192 at the network level can also reduce the risk of accidental exposure. Staying vigilant against brand impersonation tactics is critical in safeguarding cryptocurrency assets.