trezorhardwarewallet-eans[.]pages[.]dev

The domain trezorhardwarewallet-eans.pages.dev was identified as engaging in brand impersonation, specifically targeting Trezor, a well-known hardware cryptocurrency wallet provider. This threat type involves mimicking legitimate brand websites to deceive users into revealing sensitive information or transferring funds. No specific drainer kit was detected, but the impersonation alone poses significant risk to Trezor customers.

Technical analysis reveals that the domain has a VirusTotal score of 8/95, meaning eight security vendors flag it as malicious. It was registered through Cloudflare, Inc. and resolves to IP address 172.66.47.164. The domain was created on February 21, 2026, and its SSL certificate is issued by Google Trust Services (WE1). The page title displayed is "Suspected phishing site | Cloudflare," indicating that Cloudflare has already taken action. It appears on one security blocklist, but Google Safe Browsing (GSB) status is not explicitly listed.

The current status of the domain is offline, indicating that hosting or registrar-level takedown has been initiated. PhishDestroy recommends that users who may have visited this domain monitor their accounts for unauthorized activity and ensure they only access Trezor services through official channels. While the immediate threat is neutralized, residual risk remains due to potential cached pages or similar domains. Users should report any suspicious communications and enable multi-factor authentication.