Just happened across this today.
I typed Trezor into a google search and the first result gave me a google AD - w ww.triezor.io
and when I follow the link the web address changes to
https://tlezor.io/wallet/Just drawing attention to this, I recon someone could easily get caught if in a hurray.
Here are some screenshots of how the site tries to extract your private seed:
Search result for Trezor:
Following the AD:
The web address is different to that suggested in the search
The site looks identical
Clicking on Trezor one as you would do normally results in the next identical page [obviously
without a trezor connected]
also with official vid about the hologram
after pressing "continue to wallet" the page is Prompting for your Trezor to be connected:
And after about 5 seconds the page automatically prompts for the seed input