trezzrsuite[.]framer[.]ai

The domain trezzrsuite.framer.ai is a cryptocurrency-themed phishing site that impersonates the Trezor brand, specifically targeting users of Trezor Suite. The page title, "Trezor Suite: Manage Your Crypto with Security and Ease," indicates it poses as a legitimate cryptocurrency management platform. The primary threat is credential theft or cryptocurrency asset compromise, as the site likely attempts to harvest login credentials or seed phrases from victims.

Technical analysis reveals the site was flagged by 7 out of 95 VirusTotal vendors, with detections from alphaMountain.ai, CRDF, CyRadar, ESET, and Forcepoint ThreatSeeker. It appears on 5 blocklists. The domain is registered through CSC Corporate Domains, Inc., and was created on January 6, 2018. The IP address is 35.71.142.77, hosted in the United States under AS16509 (Amazon.com, Inc.). SSL certificate is issued by Let's Encrypt with fingerprint E8. Nameservers are ns-114.awsdns-14.com, ns-1198.awsdns-21.org, ns-1902.awsdns-45.co.uk, and ns-635.awsdns. The site is currently offline.

The current status of the domain is down or offline, indicating it is not actively serving malicious content. The risk level is moderate due to the confirmed impersonation of a legitimate brand and multiple security vendor detections, though the offline status reduces immediate threat. Continued monitoring is recommended in case the site becomes active again.