app-suite-trzo[.]framer[.]ai

This domain, app-suite-trzo.framer.ai, is identified as an active phishing site specializing in brand impersonation targeting Trezor, a cryptocurrency hardware wallet provider. The site presents itself as the legitimate Trezor Suite application, designed to manage crypto assets with purported security and ease. Analysis indicates this domain is actively used to deceive users into entering sensitive credentials, such as wallet recovery seeds or private keys, under the false pretense of managing their crypto assets securely.

Infrastructure analysis reveals the domain was registered on January 06, 2018, through CSC Corporate Domains, Inc., and currently resolves to the IP address 31.43.160.6. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites. VirusTotal reports that 3 of 95 security vendors have flagged this domain as malicious, indicating a moderate but concerning level of detection. The page title, "Trezor Suite: Manage Your Crypto with Security and Ease," closely mimics the legitimate Trezor Suite, further enhancing its deceptive appearance. No additional blocklist entries or trust scores were provided, but the combination of brand impersonation and low detection rates suggests a targeted and potentially evasive threat.

As of the latest assessment, app-suite-trzo.framer.ai remains active and poses a high risk to users, particularly those unfamiliar with the legitimate Trezor Suite interface. Immediate actions are recommended, including blocking the domain at the network level, updating endpoint protection rules to flag the domain as malicious, and alerting users to the phishing threat. Organizations and individuals should verify the authenticity of any crypto wallet management interface by cross-referencing official sources and avoiding interaction with untrusted domains. Monitoring for similar impersonation attempts, particularly those leveraging Let's Encrypt certificates and low initial detection rates, is advised to mitigate further exposure.