info-trezrwallet[.]vercel[.]app

This domain, info-trezrwallet.vercel.app, poses a significant threat as an active brand impersonation phishing site targeting Ethereum users. The fraudulent page mimics the official Trezor hardware wallet interface, presenting itself under the title 'Trezor Wallet — Secure Your Crypto with a Trusted Hardware Wallet.' Its objective is to deceive visitors into entering sensitive credentials, such as private keys or recovery phrases, which attackers can then exploit to gain unauthorized access to cryptocurrency wallets and drain digital assets. The site’s design and branding are engineered to appear legitimate, increasing the likelihood of successful social engineering attacks against unsuspecting users seeking wallet security solutions. Analysis indicates this domain was registered through Vercel Inc. and created on March 02, 2026, an unusually future-dated entry that may suggest an attempt to evade detection or manipulate registration records. The domain resolves to the IP address 216.198.79.3, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. Security vendor assessments on VirusTotal reveal that 17 out of 95 detection engines have flagged this domain as malicious, confirming its classification as a high-risk phishing resource. Additionally, the domain appears on one security blocklist and is actively blocked by at least one threat intelligence platform. The SSL certificate, issued by Google Trust Services under the identifier WR1, does not mitigate the risk, as encrypted phishing sites are a common tactic to lend false legitimacy. Users who have visited info-trezrwallet.vercel.app or interacted with its content should take immediate action to secure their assets. If any sensitive information, such as wallet credentials or recovery phrases, was entered on the site, affected individuals must transfer all cryptocurrency holdings to a new, secure wallet using a trusted device. It is critical to revoke any connected dApp authorizations and monitor transaction histories for unauthorized activity. Users should also scan their devices for malware, as phishing sites may deploy additional payloads. To prevent future incidents, individuals are advised to verify domain authenticity by cross-referencing official sources and using hardware-based authentication methods for cryptocurrency transactions. Bookmarking legitimate sites and avoiding links from unsolicited communications further reduces exposure to such threats.