trezor-suite-home[.]pages[.]dev

Analysis of the domain trezor-suite-home.pages.dev indicates it is a brand-impersonation phishing site targeting cryptocurrency wallet users, specifically impersonating the Trezor Suite software as suggested by its page title 'Trezor Suite Review 2025: Is it the Best Cold Wallet Software?'. The domain was registered on February 21, 2026, through Cloudflare, Inc., and resolves to IP 172.66.47.169 within Cloudflare's US-based AS13335 network. As of July 25, 2026, the domain returns an HTTP 403 status, suggesting it is either taken offline or restricted, and it is currently blocked by at least one security vendor (PhishDestroy). Infrastructure analysis reveals the use of Cloudflare nameservers (patryk.ns.cloudflare.com, emerie.ns.cloudflare.com) and technologies including HSTS and HTTP/3, which are consistent with modern phishing campaigns leveraging legitimate CDN services to evade detection. The SSL certificate is issued by Google Trust Services (WE1), further indicating the use of reputable infrastructure to lend false legitimacy.

Gridinsoft assigns a trust score of 0/100, while Scamadviser rates it at 41/100, reflecting conflicting assessments but overall low confidence in its authenticity. Four of 93 security vendors on VirusTotal flagged the domain, though the specific detection rules or signatures are not detailed in available intelligence. The domain appears on one security blocklist, reinforcing its classification as a threat. The scam type is explicitly identified as 'Wallet/Seed Phishing', aligning with the page title's focus on cold wallet software.

While the exact content of the site remains unanalyzed, the combination of brand impersonation, low trust scores, and blocklist presence confirms its malicious intent. Defenders should treat this domain as a confirmed phishing threat. Recommended actions include blocking the domain and associated IP (172.66.47.