tr-trezor-io[.]pages[.]dev

As of July 23, 2026, the domain tr-trezor-io.pages.dev has been confirmed as a crypto scam impersonating the Trezor brand. The site was registered through Cloudflare, Inc. and created on February 21, 2026. Infrastructure analysis reveals that the domain resolves to the IP address 188.114.96.3, which is located in the United States under the Cloudflare, Inc. ASN (AS13335). The domain is currently offline, returning an HTTP status code 403, and the page title reads 'Suspected phishing site | Cloudflare'.

This indicates that Cloudflare has likely taken steps to mitigate the threat. The domain appears on one security blocklist and has been flagged by 13 out of 93 security vendors, suggesting a significant level of suspicion among threat detection systems. Scamadviser and Gridinsoft both assign the domain a trust score of 1/100 and 0/100, respectively, indicating a very low level of trust. The SSL certificate is issued by Google Trust Services, which may have been used to lend a false sense of security.

Technologies detected on the domain include HSTS, Cloudflare, and HTTP/3. The exact content of the site has not been fully analyzed, but the evidence strongly suggests that it was designed to impersonate Trezor and potentially trick users into providing sensitive information or cryptocurrency. Defenders are advised to block this domain and educate users about the risks of crypto scams and the importance of verifying the authenticity of websites before trusting them with personal data or financial transactions.