trozor-log[.]wixstudio[.]com

This domain, trozor-log.wixstudio.com, is identified as a cryptocurrency wallet phishing site designed to deceive users into disclosing sensitive credentials, including private keys or recovery seed phrases. Analysis indicates the domain mimics legitimate wallet interfaces to harvest authentication details, which can lead to unauthorized access and immediate asset theft. The threat specifically targets users of hardware and software cryptocurrency wallets by presenting fraudulent login or recovery portals under the guise of official support or software updates. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered through a major registrar on April 27, 2026, and resolves to the IP address 34.144.206.118, hosted on a cloud infrastructure platform. Security engines on VirusTotal flagged the domain as malicious in 12 out of 95 detections, while it appears on three independent security blocklists. Despite currently returning a 404 error page, historical data confirms the domain previously served active phishing content. The SSL certificate issued by a public certificate authority further enabled the site to appear legitimate to unsuspecting users. Users who interacted with trozor-log.wixstudio.com should take immediate remedial action. Any credentials, recovery phrases, or private keys entered on the site must be considered compromised. Affected individuals should transfer remaining assets to a new, secure wallet using a clean device and revoke any connected authorizations. It is recommended to monitor transaction histories for unauthorized activity and report the incident to relevant security teams or fraud response units. Given the high-risk classification, users are advised to avoid any further engagement with the domain or related communications.