Just happened across this today.
I typed Trezor into a google search and the first result gave me a google AD - w ww.triezor.io
and when I follow the link the web address changes to
https://tlezor.io/wallet/Just drawing attention to this, I recon someone could easily get caught if in a hurray.
Here are some screenshots of how the site tries to extract your private seed:
Search result for Trezor:
![](https://ip.bitcointalk.org/?u=https%3A%2F%2F1.bp.blogspot.com%2F-mvWQ-BgcHs0%2FXd7zeRn8cKI%2FAAAAAAAAAaw%2F-GJ-vjfXzkQ6ec2rnqOCeAy5eAdgkPYSQCNcBGAsYHQ%2Fs1600%2FCapture01.PNG&t=663&c=QxHl_HU7Laepjg)
Following the AD:
The web address is different to that suggested in the search
The site looks identical
![](https://ip.bitcointalk.org/?u=https%3A%2F%2F1.bp.blogspot.com%2F-tKqWOWoQdEM%2FXd7yyRuv0rI%2FAAAAAAAAAZ0%2FweAjnuiL-34k3Qlbo2X25m6uvz7dQ5o8ACNcBGAsYHQ%2Fs1600%2FCapture02.PNG&t=663&c=tGe4WVFTLwaGyw)
Clicking on Trezor one as you would do normally results in the next identical page [obviously
without a trezor connected]
also with official vid about the hologram
![](https://ip.bitcointalk.org/?u=https%3A%2F%2F1.bp.blogspot.com%2F-fLW16qTwBOE%2FXd7yxEK-2YI%2FAAAAAAAAAZw%2FHnW70o0Bl4Ubsvl8E8i6VOXHmXE2H4yEwCNcBGAsYHQ%2Fs1600%2FCapture03.PNG&t=663&c=R32yfaX_lXKvvg)
after pressing "continue to wallet" the page is Prompting for your Trezor to be connected:
![](https://ip.bitcointalk.org/?u=https%3A%2F%2F1.bp.blogspot.com%2F-0gaqXcAz5dE%2FXd7zFOV_bhI%2FAAAAAAAAAac%2Fus8lUNBt3kcAyHit1NRRxgaH8dwrBNiwwCNcBGAsYHQ%2Fs1600%2FCapture035.PNG&t=663&c=leq5ZcHP1ixvjQ)
And after about 5 seconds the page automatically prompts for the seed input
![](https://ip.bitcointalk.org/?u=https%3A%2F%2F1.bp.blogspot.com%2F-UeV7hfDkkX4%2FXd7yyyzG0MI%2FAAAAAAAAAZ4%2FwjBWRcQirfYjKM7bBcDXs0LMM92m8SVQQCNcBGAsYHQ%2Fs1600%2FCapture04.PNG&t=663&c=HrEc3WpiDgshQg)