docs-trezor-app.pages.dev

Trezor

https://docs-trezor-app.pages.dev/config.php Access site

Screenshot

Investigate

Domain docs-trezor-app.pages.dev1 CT host on apex

urlscan

page.domain

VirusTotal

Whois

IP 188.114.97.3

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://docs-trezor-app.pages.dev/config.php

urlscan

Wayback

archive.today

Cert WE1

crt.sh

Censys

Google CT

Phishunt analysis Beta

40 high suspicion likely_phishingheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+5.1 urlscan.io
+4.5 Brand in title
+4.1 Brand in screenshot
+3.4 Shared IP cluster
+3.0 OpenPhish
+2.2 Country mismatch
+1.1 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.7 Brand in cert SAN
+0.6 Brand impersonation in path
+0.6 Login text in screenshot
+0.6 Suspicious TLD
+0.5 Young certificate
+0.5 Long domain
+0.3 Free CA
+0.2 Executable page
+0.2 Hyphens
+0.1 External scripts
+0.1 Deep subdomain

26 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Fake Trezor hardware wallet site hosted on Cloudflare Pages and serving content through an executable PHP file. Flagged by both OpenPhish and URLScan as malicious, it likely targets users' wallet seed phrases or login credentials under the guise of official Trezor documentation.

Brand impersonation in pathExecutable pageOpenPhish

AI-generated from stored detector signals - the AI never visited the site. · 2026-08-26 · confidence 82%

Domain & Network

Whois

Registrar CloudFlare, Inc.

Network

IP 188.114.97.3

Country