trazaoire-suite[.]wasmer[.]app

This domain, trazaoire-suite.wasmer.app, is actively impersonating the official Trezor hardware wallet interface to deceive users into disclosing sensitive cryptocurrency credentials or installing malicious software. Analysis of the page title, "Official Trezor™ Suite — Desktop & Web App for Hardware Wallets," confirms the intent to mimic legitimate Trezor Suite applications, which are used for managing cryptocurrency assets. The domain poses a significant risk of credential theft or crypto drainer deployment, where attackers could gain unauthorized access to users' wallets and exfiltrate funds without detection. Infrastructure analysis reveals the domain was registered through Wasmer, a platform that allows rapid deployment of web applications, and currently resolves to the IP address 62.210.172.151. Despite its active status and convincing facade, the domain has not been flagged by any security vendors, with a VirusTotal detection score of 0/95. The SSL certificate is issued by Let's Encrypt, a common tactic used by threat actors to lend legitimacy to malicious sites. No blocklist entries or prior malicious associations have been identified for this domain, indicating it may be a newly deployed threat. Users who have visited trazaoire-suite.wasmer.app or interacted with its content should immediately cease all engagement and assume their credentials or wallet details may be compromised. It is recommended to revoke any active sessions, rotate passwords for associated accounts, and monitor wallet transactions for unauthorized activity. If cryptocurrency assets were entered or transactions were initiated, users should consider transferring remaining funds to a new, secure wallet. Additionally, endpoint devices used to access the domain should undergo a thorough security scan to detect potential malware or backdoors installed during the interaction.