trezorsuiteapp[.]vercel[.]app

This domain, trezorsuiteapp.vercel.app, is currently active and engaged in brand impersonation targeting Ethereum users. Analysis indicates the site mimics legitimate cryptocurrency management platforms to deceive victims into disclosing sensitive credentials or executing unauthorized transactions. The threat type is classified as a crypto drainer, designed to siphon digital assets from unsuspecting users under the guise of an official service. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Tucows Domains Inc. It resolves to the IP address 64.29.17.67, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509) in the United States. The SSL certificate is issued by Google Trust Services under the WR1 root. Detection metrics show the domain is flagged by 14 of 95 security vendors on VirusTotal, with one additional blocklist entry. The page title, 'Trezor Suite App — Securely Manage Your Crypto | Official Guide,' further corroborates the intent to impersonate a trusted cryptocurrency wallet provider. As of the latest assessment, the domain remains active and unmitigated. Users are strongly advised to avoid interacting with trezorsuiteapp.vercel.app or any associated links. Organizations should update blocklists to include this domain and its resolving IP address. Cryptocurrency holders are urged to verify the authenticity of any platform claiming affiliation with Ethereum or Trezor by cross-referencing official sources. Immediate reporting to relevant security teams and domain registrars is recommended to facilitate takedown efforts.