trezor-wallet[.]vercel[.]app

This domain is an active credential theft operation impersonating Trezor, a hardware cryptocurrency wallet provider. The site displays a fraudulent interface labeled 'Trezor Suite App® (Official) | Desktop & Web Crypto Management®' to deceive visitors into entering sensitive wallet credentials or recovery phrases. Analysis indicates the threat is designed to harvest private keys, enabling attackers to drain cryptocurrency assets from compromised wallets. Infrastructure analysis reveals the domain was registered on June 15, 2026, through Vercel Inc. and resolves to IP address 64.29.17.131. The SSL certificate is issued by Google Trust Services (WR1), a common tactic to appear legitimate. Security vendors on VirusTotal have flagged the domain, with 4 out of 95 engines detecting malicious activity. The site is currently listed on three security blocklists, including PhishDestroy and MetaMask, and remains operational despite these warnings. Users who visited trezor-wallet.vercel.app should immediately cease all interaction with the site. If credentials or recovery phrases were entered, affected wallets must be considered compromised. Transfer all remaining assets to a new, secure wallet using a clean device and revoke any connected dApp authorizations. Monitor account activity for unauthorized transactions and report the incident to relevant security teams. Avoid clicking on links from unverified sources and verify domain authenticity by cross-referencing with the official Trezor website.