suiter[.]framer[.]ai

The domain suiter.framer.ai is a phishing site engaged in brand impersonation targeting Trezor, a cryptocurrency hardware wallet provider. It presented itself as the 'Official Trézor Suite' web application to deceive users into entering sensitive credentials or wallet information, posing an elevated risk of cryptocurrency theft. As of analysis, suiter.framer.ai has been taken offline, though it previously operated without an associated drainer kit.

Technical indicators confirm the domain's malicious intent. suiter.framer.ai was flagged by 1 of 95 VirusTotal security vendors, specifically Gridinsoft, and appeared on one security blocklist, PhishDestroy. The domain was registered through CSC Corporate Domains, Inc. on January 06, 2018, and resolved to the IP address 52.223.52.2, hosted on Amazon.com, Inc.'s infrastructure (AS16509) in the US. The SSL certificate was issued by Let's Encrypt (E8), and the site employed technologies such as Framer Sites, React, HSTS, and HTTP/3. Google Safe Browsing did not flag the domain at the time of assessment.

Users who interacted with suiter.framer.ai should immediately revoke any token approvals granted to unknown contracts and transfer cryptocurrency funds to a new wallet. Enable two-factor authentication (2FA) on all accounts and monitor for unauthorized transactions. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the impersonated brand (Trezor) to aid in takedown efforts and protect other potential victims.