trezorr-io-strtt[.]pages[.]dev

The domain trezorr-io-strtt.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and resolves to the IP address 172.66.44.92, which is owned by AS13335 Cloudflare, Inc. in the United States. The site presents the page title "Suspected phishing site | Cloudflare," indicating that it has been flagged by Cloudflare’s internal abuse detection mechanisms. TLS termination is provided by a Google Trust Services certificate (WE1), and the connection enforces HSTS while supporting HTTP/3, reflecting a modern web stack. An HTTP request to the host returns a 403 status code, and the domain is currently taken offline, limiting immediate interaction but confirming the presence of a protective block.

VirusTotal scans have recorded 15 detections out of 93 security vendors, reinforcing the malicious assessment. The domain appears on one external security blocklist and is explicitly listed by PhishDestroy as a known phishing resource. Reputation services assign extremely low trust scores: Scamadviser rates the site at 1 / 100 and Gridinsoft at 0 / 100. The nameservers in use are nikon.ns.cloudflare.com and gracie.ns.cloudflare.com, both standard Cloudflare delegations.

The observed indicators collectively point to a crypto‑related scam that impersonates the Trezor brand, consistent with the reported scam type of "Crypto Scam." Concrete evidence beyond the page title, certificate data, and infrastructure fingerprints is not available because the site is offline and no visual or content capture has been recorded. Analysts should block the domain and its associated IP address at perimeter defenses, add the host to internal phishing and URL filtering lists, and monitor for newly registered domains that share the "trezorr-io" pattern or use the same Cloudflare nameservers. Continuous vigilance against similar brand‑impersonation campaigns targeting cryptocurrency hardware wallets is advised.