Phishing detection: en-home-trezore.pages.dev
Trezor Investigate
Domain
en-home-trezore.pages.dev1 CT host on apex
IP
188.114.97.3
URL
http://en-home-trezore.pages.dev/appeals/submit-appeal-form…
Cert
WE1
Phishunt analysis Beta
36
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +3.4 Shared IP cluster
- +3.0 OpenPhish
- +2.2 Country mismatch
- +2.0 Young domain
- +1.1 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.7 Brand in cert SAN
- +0.6 Brand impersonation in path
- +0.6 Suspicious TLD
- +0.5 Long domain
- +0.3 Free CA
- +0.2 Hyphens
- +0.1 Deep subdomain
21 signals fired · detector v3.0.0
AI analysis AIBeta
Crypto scam
A Cloudflare Pages site with a Trezor lookalike name serves an account appeal form path over plain HTTP, impersonating the hardware wallet brand to collect wallet or account details. It is listed by OpenPhish and shares an IP cluster with similar sites.
PaaS hostOpenPhishBrand impersonation in path
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-16 · confidence 75%
Domain & Network
Whois
Registrar
CloudFlare, Inc.
Network
IP
188.114.97.3 Cloudflare CDN
Country
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
WE1
External detection
OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise