trezor-login-auth[.]pages[.]dev

The domain trezor-login-auth.pages.dev is a phishing site involved in brand impersonation targeting the cryptocurrency hardware wallet brand Trezor. It aimed to deceive users into compromising their credentials through a scam website. The site has been taken offline and is no longer accessible, reducing immediate risk but highlighting a past threat to users searching if trezor-login-auth.pages.dev is safe or a scam.

Technically, trezor-login-auth.pages.dev was created on September 09, 2025, and registered through Cloudflare, Inc., with Cloudflare nameservers marty.ns.cloudflare.com and eve.ns.cloudflare.com. It resolved to the IP address 188.114.96.3 located in the United States under AS13335 Cloudflare, Inc. The domain held an SSL certificate issued by Google Trust Services / WE1, using security technologies including HSTS and HTTP/3. VirusTotal flagged 1 of 95 security vendors, including Fortinet, while the domain appeared on one security blocklist, PhishDestroy. The web page title observed was 'Suspected phishing site | Cloudflare' with an HTTP 403 status.

Users who may have interacted with trezor-login-auth.pages.dev should change their passwords for any associated accounts immediately and enable two-factor authentication to mitigate credential theft risks. It is advisable to monitor accounts for unauthorized activity and report any suspicious transactions or communications to the legitimate Trezor support team and relevant security authorities. Reporting the domain to phishing blocklists and security vendors helps reduce future exposure to similar scams.