official-suiteapp-en[.]framer[.]ai

This domain is flagged for elevated risk due to brand_impersonation targeting Trezor, a hardware wallet provider. The site mimics the official Trezor Suite application, presenting itself as a desktop and web app for hardware wallets, which aligns with common tactics used to deceive users into disclosing sensitive credentials or installing malicious software. Analysis indicates the domain was registered through CSC Corporate Domains, Inc., and resolves to the IP address 31.43.161.6. It was created on April 17, 2026, and is currently offline. The domain appears on one security blocklist and is blocked by PhishDestroy. A Gridinsoft trust score of 0/100 further confirms its malicious nature. VirusTotal reports 17 out of 95 security vendors flagging the domain as malicious. The SSL certificate is issued by Let's Encrypt, and the site employs technologies such as Framer Sites, React, HSTS, and HTTP/3. Mitigation steps for this brand_impersonation threat include blocking the domain and its resolving IP (31.43.161.6) at the network perimeter. Security teams should update endpoint detection rules to flag any attempts to access this domain or related infrastructure. Users should be educated on verifying official domains directly through Trezor’s authenticated channels and warned against interacting with unsolicited links or downloads claiming to be Trezor Suite. Monitoring for similar impersonation domains using the same registrar or hosting patterns is recommended.