us-trexorsuite[.]pages[.]dev

This domain is flagged as a brand impersonation threat targeting users of Trezor, a cryptocurrency hardware wallet platform. Analysis indicates the domain was designed to closely resemble the official Trezor Suite interface, presenting itself as a legitimate portal for managing crypto assets securely. The page title, 'Trezor Suite | Manage Your Crypto Securely,' directly mirrors the branding of the authentic service, increasing the likelihood of deception among unsuspecting users seeking wallet management tools. Infrastructure analysis reveals multiple red flags supporting the fraudulent classification. The domain was registered on April 19, 2026, through Cloudflare, Inc., and resolves to the IP address 188.114.96.3. It appears on one security blocklist, with PhishDestroy marking it as malicious. VirusTotal detection shows 1 out of 95 security vendors flagging the domain, while the Gridinsoft trust score is 0 out of 100. The SSL certificate is issued by Google Trust Services, and the site employs technologies such as HSTS, Cloudflare, and HTTP/3, which are commonly used by both legitimate and malicious sites to evade detection. Users who accessed or interacted with us-trexorsuite.pages.dev should take immediate action to mitigate potential risks. Any credentials, recovery phrases, or private keys entered on this domain should be considered compromised. Affected individuals must cease all interaction with the site, revoke any connected wallet authorizations, and transfer assets to a new, secure wallet. It is also recommended to monitor official communications from Trezor for further guidance and report the incident to relevant cybersecurity authorities or fraud reporting platforms for additional investigation.