us-trezur-suite[.]framer[.]ai

This domain, us-trezur-suite.framer.ai, is classified as a generic phishing threat targeting the Trezor hardware wallet brand. The page title mimics official Trezor Suite software to deceive users into providing sensitive information such as recovery seeds or login credentials. No specific drainer kit has been identified, but the phishing infrastructure is designed to harvest cryptocurrency wallet credentials.

Technical indicators confirm the domain is registered through CSC Corporate Domains, Inc. and was created on January 6, 2018. It resolves to IP address 31.43.160.6 and uses a Let's Encrypt SSL certificate. VirusTotal reports 0 detections out of 95 scans, indicating it has not been widely flagged by security vendors. Google Safe Browsing and blocklist statuses are not provided, but the domain is currently active and under investigation.

The domain remains active as of the latest check, posing an ongoing risk to users who may mistake it for the legitimate Trezor Suite site. No takedown actions have been reported, and the low detection rate on VirusTotal suggests it may evade initial automated defenses. Users should avoid interacting with this domain, never enter recovery seeds or passwords, and report the site to relevant cybersecurity authorities. Monitoring for changes in IP or certificate status is recommended to assess evolving risk.