trejort-started[.]wixstudio[.]com

The domain trejort-started.wixstudio.com is currently flagged for a crypto drainer threat involving brand impersonation of Trézor. The domain has been taken offline, mitigating immediate risk. However, its previous activity posed a high threat level due to its sophisticated mimicry of the official Trézor getting started page.

According to threat intelligence data, this domain has been flagged by 11 out of 95 security vendors on VirusTotal. It was registered through GoDaddy.com, LLC and resolves to the IP address 34.144.206.118. The domain was created on December 17, 2016, and was protected by a Let's Encrypt SSL certificate, which could lend a false sense of security to unsuspecting users. Additionally, the domain has been included on 3 security blocklists and is known to be blocked by PhishDestroy, PhishingArmy, and OISD, reinforcing its credibility as a threat.

Currently, the domain is offline, thereby reducing any immediate threat it might pose. Users are advised to remain vigilant against similar domains that could emerge, particularly those impersonating trusted brands like Trézor. It is imperative to verify domain authenticity before entering sensitive credentials and to employ comprehensive security solutions that include phishing detection to prevent compromise. Continuous monitoring of threat feeds and security lists for new entries is recommended to ensure awareness of emerging threats.