get-suites[.]framer[.]ai

The domain get-suites.framer.ai is associated with a brand impersonation phishing threat targeting the Trezor cryptocurrency brand. The site posed as an official Trezor Suite application to deceive users, but it has been taken offline and currently returns an HTTP 404 status. This domain is considered a scam related to cryptocurrency and is under investigation for its malicious intent.

Technical analysis of get-suites.framer.ai reveals it was created on January 06, 2018, and is registered through CSC Corporate Domains, Inc. The domain resolves to IP address 52.223.52.2, located in the United States under Amazon.com, Inc. (AS16509). It uses an SSL certificate issued by Let’s Encrypt / E8 and employs technologies such as Framer Sites, React, HSTS, and HTTP/3. Despite appearing on one security blocklist (PhishDestroy), it has not been flagged by Google Safe Browsing and shows zero detections across 95 VirusTotal vendors.

Users who encountered get-suites.framer.ai or similar phishing attempts impersonating Trezor should immediately change any compromised credentials and enable two-factor authentication on their accounts. Monitoring for unauthorized transactions or fraud is advised. Reporting the phishing domain to security blocklists like PhishDestroy and to the hosting provider can help mitigate further abuse. Avoid interacting with suspicious links claiming to be official Trezor applications to remain safe.