trezrebridge[.]wixstudio[.]com

PhishDestroy has flagged trezrebridge.wixstudio.com as a live brand-impersonation domain targeting Trezor users. This site leverages the free WixStudio hosting platform to mimic the official Trezor wallet page, tricking users into entering recovery phrases or login credentials. The threat is active and remains under investigation as of seed a452f0. Users who interact with this domain risk immediate financial loss through credential theft or wallet draining attacks.

This domain was flagged by PhishDestroy after VirusTotal returned 0 detections across 95 antivirus engines on 2024-06-12. The domain resolves to IP address 34.144.206.118 and uses a valid Let’s Encrypt SSL certificate to appear legitimate. It is currently hosted on Wix’s infrastructure and has not been listed on any major blocklists at the time of analysis. The SSL certificate was issued on 2024-06-11 and expires 2024-09-09. The domain was registered within the past 30 days, aligning with the recent surge in brand-impersonation campaigns targeting cryptocurrency users. Trust scores from multiple threat intelligence platforms remain neutral due to its novelty and low detection rate.

To mitigate exposure to this threat, Trezor users should bookmark and access their wallet only via trezor.io. Never click links from emails, social media, or ads claiming to offer support or special promotions. Enable passphrase encryption and two-factor authentication on your Trezor device. Use a hardware wallet for all crypto transactions and never enter your recovery phrase on any website. If you suspect interaction, immediately transfer funds to a new wallet and revoke any connected permissions. Report the domain to Trezor and your local cybercrime unit. Always verify URLs carefully—look for correct spelling, HTTPS, and domain ownership before entering sensitive data.