app-suits-en-us[.]framer[.]ai

This domain poses as the official Trezor Suite application, a cryptocurrency management platform, to deceive users into entering sensitive credentials or downloading malicious software. The site mimics the legitimate Trezor interface, including branding, layout, and page titles such as 'Trezor Suite App (Official) | Desktop & Web Crypto Management.' Users who interact with this domain risk exposing wallet recovery phrases, private keys, or installing malware designed to exfiltrate cryptocurrency assets. The threat is particularly dangerous for individuals unfamiliar with official Trezor distribution channels, as the site appears professionally designed and uses technical elements to lend credibility. Analysis indicates this domain is not newly registered but has been repurposed for malicious activity. Created on January 6, 2018, and registered through CSC Corporate Domains, Inc., the domain resolves to the IP address 31.43.160.6 and uses a Let's Encrypt SSL certificate, which is commonly exploited by threat actors to appear legitimate. Security vendors have flagged the domain in 2 out of 95 VirusTotal scans, and it appears on three independent security blocklists. The Gridinsoft trust score of 0/100 further confirms its malicious classification. The domain is currently active and has not been taken down despite being blocked by multiple security tools. If a user has visited app-suits-en-us.framer.ai, immediate action is required to mitigate potential compromise. First, disconnect the device from the internet to prevent ongoing data exfiltration. Do not enter any credentials or download files from the site. If credentials were entered, assume they are compromised and revoke access to all associated cryptocurrency wallets immediately. Scan the device with updated security software to detect and remove any installed malware. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where possible. Users should only download the Trezor Suite application from the official trezor.io domain or verified app stores.