trzor-com.pages[.]dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of trzor-com.pages[.]dev
This website appears to present itself as an informational page about hardware wallets, specifically comparing Trezor-related features and selection criteria. The page title and visible content describe security models, recovery mechanisms, and coin support, and the screenshot includes wording such as "Hardware Wallet Guide" and "Educational template." It also displays disclaimers stating that it is "not the official vendor site" and "not affiliated with any brand unless authorized."
Despite that disclaimer, the domain name closely resembles the Trezor brand while being hosted on a pages.dev subdomain rather than an official brand-owned domain. Based on the visible content, the page may be intended to attract users searching for Trezor product information and direct them toward a downloadable comparison checklist. No clear operator identity, company details, or organizational ownership are visible in the provided scan data.
Safety Assessment for trzor-com.pages[.]dev
Several security signals raise concern for this domain at the time of the scan. It was flagged by 6 out of 91 security engines, with multiple detections classifying it as phishing. In addition, the domain name closely resembles the Trezor brand while using a non-official hosting subdomain, which may indicate a look-alike page designed to capture traffic intended for the legitimate hardware wallet vendor.
The visible page attempts to reduce suspicion by presenting itself as an educational comparison resource and by stating that it is not the official vendor site. However, such disclaimers do not remove the underlying risk when a domain strongly resembles a known brand and independent security engines have already raised phishing concerns. The lack of ranking data and the use of a hosted subdomain rather than a clearly branded primary domain may further increase caution.
At the same time, the malware scan did not detect malicious files, and blacklist checks included in the scan were clean at that moment. That said, phishing pages often contain little or no malware payload, so a clean file scan does not materially offset the brand-resemblance and phishing detections. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate and is served through Cloudflare infrastructure, with hosting resolved to a Cloudflare IP in Canada. The certificate appears current, which helps provide encrypted transport, but valid HTTPS alone does not verify that the site is trustworthy or officially associated with the brand referenced in the content.
WHOIS data indicates the domain has existed since 2020 and is registered through Cloudflare's registrar. DNSSEC appears to be unsigned. The page is hosted on a pages.dev subdomain, which is commonly used for static site deployment and can be legitimate, but it may also be used for quickly publishing look-alike pages. No flagged files, external links, or iframes were identified in the provided scan results.
Share your experience with this website. Was it safe? Did you encounter any issues?