trazuur-suite-app[.]pages[.]dev

PhishDestroy has identified trazuur-suite-app.pages.dev as a confirmed brand impersonation phishing site targeting Trezor users. The domain, now offline, masqueraded as the legitimate Trezor Suite platform with a page titled "Trezor Suite — Hardware Wallet for Safe Crypto Storage" in an attempt to steal cryptocurrency wallet credentials and seed phrases. This threat is classified as elevated risk due to its sophisticated impersonation of a trusted hardware wallet brand.

Security analysis reveals concerning indicators: VirusTotal flagged the domain with 8 out of 95 security vendors detecting malicious activity, and it appears on one security blocklist. The domain was registered on April 14, 2026, through Cloudflare, Inc., and resolved to IP address 172.66.44.128. Its SSL certificate was issued by Google Trust Services (WE1), adding a false layer of legitimacy. The unique seed f70554 was used to track this specific phishing campaign.

Although the domain has been taken offline, users who may have visited it should immediately change their Trezor credentials and enable two-factor authentication. PhishDestroy recommends always verifying the official Trezor URL (trezor.io) before entering any sensitive information. For further protection, scan your device for malware and report any compromised accounts to Trezor support. Stay vigilant against similar phishing attempts targeting cryptocurrency platforms.