trezrsuithome[.]wixstudio[.]com

Analysis indicates that trezrsuithome.wixstudio.com is a brand-impersonation domain targeting users of the Sui cryptocurrency platform by presenting itself as the official Trezor Suite application. The domain was registered on December 17, 2016, through GoDaddy.com, LLC, and is hosted on Google Cloud infrastructure (AS396982, IP 34.144.206.118, US). The page title explicitly claims affiliation with Trezor, stating 'Official Trezor™ Suite® — Desktop & Web App for Hardware Wallets,' which aligns with the observed scam type of brand impersonation. As of July 24, 2026, the domain resolves to a 404 HTTP status, suggesting it has been taken offline or is no longer actively serving content. However, residual detection data remains relevant for historical and defensive analysis.

Infrastructure analysis reveals the use of Wix hosting services, React, RequireJS, Lodash, and Google Cloud CDN, alongside HTTP/3 and HSTS implementation. The SSL certificate is issued by Let's Encrypt (R13), a common practice even among malicious domains to appear legitimate. The domain appears on at least one security blocklist and is flagged by 8 of 91 security vendors on VirusTotal, though the specific detection rules or payloads are not detailed in available intelligence. The nameservers (dns1-4.p08.nsone.net) are associated with a reputable DNS provider, which does not inherently indicate malicious intent but may complicate takedown efforts. Defenders should treat this domain as a confirmed threat for historical reference, particularly in cryptocurrency-related fraud contexts.

While the site is currently offline, the infrastructure (e.g., Google Cloud, Wix) and registration details may persist or be repurposed. Network-level blocking of the resolved IP (34.144.206.118) and monitoring for re-emergence under similar subdomains or paths is recommended. The page content itself has not been fully analyzed, so the exact mechanics of the scam (e.g.