en-official-suites[.]square[.]site

Analysis of en-official-suites.square.site indicates a high‑confidence brand‑impersonation operation targeting Trezor users. The domain, created on February 5, 2019, is registered through MarkMonitor, Inc. and resolves to the IP address 74.115.51.4, which belongs to AS27647 (Weebly, Inc.) in the United States. DNS resolution is serviced by four Amazon Route 53 nameservers (ns-1248.awsdns-28.org, ns-1816.awsdns-35.co.uk, ns-311.awsdns-38.com, ns-810.awsdns). The site presents a page title of "Trezor Suite: Manage Your Crypto with Security and Ease," explicitly impersonating the Trezor brand, and is classified as a crypto‑scam in the supplied intelligence.

HTTP response code is 404, indicating the content is currently inaccessible, which aligns with the reported offline status. The domain is listed on a single security blocklist, PhishDestroy, and has been flagged by 14 of 95 security vendors on VirusTotal, reinforcing malicious intent. Technological fingerprints reveal deployment on Amazon Web Services and Cloudflare, while the TLS certificate is issued by Let’s Encrypt (E7).

A Scamadviser trust score of 1 out of 100 further underscores the low credibility of the host. Defenders should immediately block the domain at perimeter and DNS layers, monitor for any resurgence of the site, and add the associated IP and nameserver set to threat‑intel feeds. Ongoing observation of new domains registered by the same registrar or using similar naming patterns is recommended to mitigate potential follow‑on campaigns.