docs----asuite-trezor[.]gitbook[.]io

This domain, docs----asuite-trezor.gitbook.io, is actively impersonating Trezor, a cryptocurrency hardware wallet provider, to deceive users into disclosing sensitive credentials or installing malicious software. The page mimics the legitimate Trezor Suite interface, presenting itself as a desktop and web crypto management platform. Analysis of the domain reveals it is designed to harvest login details, recovery seeds, or private keys under the guise of official Trezor services, posing a direct risk of unauthorized asset transfers or account takeovers. Infrastructure analysis indicates the domain was registered on March 30, 2014, through Cloudflare, Inc., and currently resolves to the IP address 172.64.147.209. It employs an SSL certificate issued by Google Trust Services, which may lend an appearance of legitimacy. Detection engines on VirusTotal flag the domain as malicious, with 7 out of 95 security vendors marking it as a threat. The domain remains active and is hosted on GitBook infrastructure, utilizing technologies such as Google Cloud, Cloudflare, and HTTP/3 for content delivery and obfuscation. Users who have visited docs----asuite-trezor.gitbook.io should immediately revoke any permissions granted to associated applications and cease all interactions with the site. If credentials, recovery phrases, or private keys were entered, affected parties must transfer assets to a new, secure wallet and monitor all linked accounts for unauthorized transactions. Additionally, browser sessions should be cleared, and any downloaded files from the domain should be deleted. Network-level blocking of the domain and its resolving IP (172.64.147.209) is recommended to prevent further exposure.