suite-trrazoied[.]wasmer[.]app

This domain, suite-trrazoied.wasmer.app, poses as the official Trezor Suite application but is designed to impersonate Sui wallet infrastructure. The site presents itself as a legitimate desktop and web app for hardware wallets, potentially tricking users into entering sensitive credentials or installing malicious software. Such impersonation can lead to unauthorized access to cryptocurrency wallets, resulting in asset theft or compromise of private keys. The threat specifically targets users of the Sui blockchain, exploiting trust in the Trezor brand to facilitate fraudulent activities. Analysis indicates the domain is registered through Squarespace Domains II LLC and currently resolves to the IP address 62.210.172.162. The SSL certificate is issued by Let's Encrypt, which is common for both legitimate and malicious sites. As of the latest scan, the domain has 0 detections out of 95 engines on VirusTotal, suggesting it has not yet been widely flagged by security vendors. However, it appears on one security blocklist (PhishDestroy) and is marked as offline, which may indicate recent takedown efforts or temporary suspension. If a user visited suite-trrazoied.wasmer.app or interacted with its content, immediate action is required. Disconnect the device from the internet to prevent potential data exfiltration. Scan the system using updated security tools to detect any installed malware or unauthorized modifications. Users should also revoke any active sessions or authorizations granted to the site in their Sui wallet or related applications. Monitor wallet transactions closely for any unauthorized activity and consider migrating assets to a new wallet if compromise is suspected. Report the domain to relevant security teams or blocklist providers to aid in broader mitigation efforts.