traezr-suites-get[.]framer[.]ai

The domain traezr-suites-get.framer.ai, now offline, impersonates the Sui brand to conduct phishing activities. Despite its takedown, the site was flagged by one out of 91 vendors on VirusTotal and is listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL. This indicates a coordinated effort to exploit users interested in crypto management.

The page, titled 'Secure Crypto Management: How Hardware Wallet Apps Work,' aimed to deceive users into believing they were interacting with legitimate Sui services. The domain was registered with CSC Corporate Domains, Inc., and was hosted on an IP in the Netherlands under Amazon's infrastructure. The use of Let's Encrypt for SSL certification suggests an attempt to appear secure and trustworthy to potential victims.

The domain's creation date in 2018 contrasts with its recent detection in 2026, highlighting a possible repurposing of an older domain for new phishing campaigns. PhishDestroy's detection pipeline identified the threat on June 21, 2026, before it propagated widely across antivirus databases. This underscores the importance of early detection in mitigating phishing threats, as attackers often exploit the time gap between registration and widespread detection to maximize their impact.