suittetrzor-io-web[.]square[.]site

This domain, suittetrzor-io-web.square.site, is an active phishing infrastructure designed to impersonate Trezor, a hardware cryptocurrency wallet provider. Analysis indicates the site presents a fraudulent guide titled 'Getting Started with Trezor Suite: A Complete Beginner’s Guide,' which mimics legitimate onboarding materials to deceive users into entering sensitive credentials, including wallet recovery seeds or private keys. The threat actor’s objective is to harvest authentication details, enabling unauthorized access to victims' cryptocurrency holdings and facilitating immediate asset theft. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain is flagged by 10 out of 95 security vendors on VirusTotal, with detection signatures identifying brand impersonation and credential harvesting. It is registered through MarkMonitor Inc. and was created on June 15, 2026, a future date suggesting potential domain spoofing or misconfiguration. The site resolves to the IP address 74.115.51.4 and employs a Let's Encrypt SSL certificate (serial number E8), which, while providing encryption, does not validate legitimacy. Additionally, the domain appears on three security blocklists and is actively blocked by multiple cryptocurrency security frameworks, further confirming its malicious classification. Users who have visited suittetrzor-io-web.square.site or interacted with its content should assume their credentials or recovery seeds have been compromised. Immediate actions include revoking any active sessions linked to the impersonated service, transferring assets to a new, secure wallet, and conducting a full security audit of associated devices. If recovery seeds were entered, the compromised wallet should be considered permanently exposed, and all funds should be migrated to a new, unaffected wallet. Monitoring for unauthorized transactions and reporting the incident to relevant security teams or blocklist providers is strongly advised to mitigate further risk.