suites[.]framer[.]ai

The domain suites.framer.ai is a phishing site engaged in brand impersonation targeting Trezor, a cryptocurrency hardware wallet provider. It presents itself as a legitimate Trezor Suite or Trezor Bridge setup page to deceive users into entering sensitive information or interacting with malicious cryptocurrency transactions. As of the latest verification, suites.framer.ai has been taken offline, but it previously operated as a cryptocurrency scam with no associated drainer kit detected.

Technical indicators for suites.framer.ai show 0 of 95 VirusTotal vendors flagging the domain, and Google Safe Browsing does not list it as malicious. The domain appears on 1 security blocklist (PhishDestroy) and is registered through CSC Corporate Domains, Inc., with a creation date of January 06, 2018. It resolves to the IP address 35.71.142.77, hosted on Amazon.com, Inc. infrastructure (AS16509) in the US. The SSL certificate is issued by Let's Encrypt (E8), and the observed page title was 'Secure Crypto Setup Using Trezor Suite & Trezor Bridge'. Detected technologies include Framer Sites, React, HSTS, and HTTP/3. The domain currently returns an HTTP 404 status.

Users who may have interacted with suites.framer.ai should immediately revoke any token approvals granted during the session and transfer cryptocurrency funds to a new, secure wallet. Enable two-factor authentication (2FA) on all accounts and monitor for unauthorized transactions. Report the phishing domain to the impersonated brand (Trezor) and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in takedown efforts.