trezor-dge[.]pages[.]dev

This domain, trezor-dge.pages.dev, poses a significant threat as a fake Trezor site designed to trick users into believing they are interacting with the legitimate Trezor service. The primary risk is that visitors may unwittingly provide sensitive information, such as login credentials or personal data, to cybercriminals who can use this information for malicious purposes, including identity theft or financial fraud.

Analysis indicates that trezor-dge.pages.dev was created on October 29, 2025, and is registered through Cloudflare, Inc. The domain resolves to the IP address 2a06:98c1:3121::3, which is located in the United States and is part of AS13335, operated by Cloudflare, Inc. The site has been flagged by 17 out of 95 security vendors on VirusTotal, and it appears on two known security blocklists, PhishDestroy and PhishingDB. The SSL certificate is issued by Google Trust Services, which is unusual for a legitimate Trezor site and may indicate an attempt to appear more trustworthy. The domain is currently offline, which can be a result of the security community's efforts to mitigate the threat.

If a user has visited trezor-dge.pages.dev, it is crucial to take immediate action to protect personal and financial information. First, change any Trezor account passwords and enable two-factor authentication if not already in place. Monitor financial accounts for any unauthorized transactions and report any suspicious activity to the relevant financial institutions. Additionally, consider using a password manager to ensure strong, unique passwords for all accounts and avoid clicking on links from unknown sources or entering sensitive information on unfamiliar websites.