trezor-suite-fan[.]pages[.]dev

This domain has been assigned a high risk level due to its active brand impersonation of Trezor, a well-known hardware wallet provider. The threat is classified as brand_impersonation, meaning the site mimics Trezor's official appearance to trick users into entering sensitive information. The page title, "Ledger Live Desktop | Manage Your Crypto Securely," further confuses users by mixing two legitimate brands, adding to the deception.

Key indicators of this threat include a VirusTotal detection rate of 3 out of 95 security vendors flagging the domain as malicious. The domain was registered through Cloudflare, Inc. and resolves to IP address 172.66.47.119. It was created on June 15, 2026, and currently appears on three security blocklists. The SSL certificate is issued by Google Trust Services / WE1, which may give a false sense of legitimacy. Despite these red flags, the domain remains active, continuing to pose a risk.

Users who encounter trezor-suite-fan.pages.dev should avoid entering any personal or financial information. They should immediately close the page and report it to Trezor's official support or to phishing reporting services. To stay safe, always verify the URL before logging in, use bookmarks for official sites, and enable two-factor authentication on all crypto accounts. PhishDestroy recommends blocking this domain and regularly checking for similar impersonation attempts.