trezosuite[.]com[.]lc

The domain trezosuite.com.lc has been identified as a confirmed crypto wallet drainer site specializing in brand impersonation targeting Sui, a blockchain platform. Analysis indicates this infrastructure was designed to deceive users into connecting wallets under the pretense of legitimate Sui services, enabling unauthorized fund transfers. The domain is currently offline, though prior activity suggests it was operational long enough to pose significant risk to cryptocurrency holders. Infrastructure analysis reveals trezosuite.com.lc resolved to IP address 188.114.97.3 and was flagged by 16 of 95 security vendors on VirusTotal. The domain was registered on June 08, 2026, an anomalous future date likely indicating registrar manipulation or falsified records. It appears on four distinct security blocklists and is actively blocked by multiple wallet security providers. The SSL certificate is issued by Google Trust Services, a common tactic to lend false legitimacy. Open-source intelligence confirms its inclusion in four AlienVault OTX threat pulses, corroborating its malicious classification. Current status indicates the domain has been taken offline, though residual risk remains for users who may have interacted with it prior to deactivation. Organizations and individuals are advised to implement network-level blocking of the domain and associated IP address. Cryptocurrency service providers should monitor for wallet addresses linked to this infrastructure and alert users who may have connected wallets during its operational window. Security teams are recommended to review logs for connections to 188.114.97.3 and correlate with known Sui-related phishing campaigns. Proactive measures include updating endpoint protection rules to detect similar impersonation domains and educating users on verifying legitimate blockchain service URLs.