hardware-en-trezo[.]wixstudio[.]com

This domain, hardware-en-trezo.wixstudio.com, is under investigation as a potential phishing site targeting Trezor hardware wallet users. Infrastructure analysis reveals it is hosted on Wix.com Ltd. infrastructure and currently resolves to IP 162.159.143.12, which is associated with Cloudflare's network. The domain appears on one security blocklist and is actively blocked by PhishDestroy, though it has not been flagged by any of the 91 vendors in the most recent VirusTotal scan. The absence of detections in VirusTotal does not confirm safety, as phishing domains often evade initial scans.

Nameservers are reported as NS_NOT_FOUND, which may indicate misconfiguration or an attempt to obscure DNS records. The domain remains active as of July 27, 2026, with no evidence of takedown or deactivation. Defenders should treat this domain as high-risk until further analysis confirms its legitimacy.

Immediate actions include monitoring network traffic for connections to this domain, blocking it at the DNS or proxy level, and examining any associated SSL certificates for anomalies. Given the domain's name and hosting on a platform commonly used for rapid phishing deployments, organizations handling cryptocurrency or hardware wallet users should prioritize this investigation. Additional context, such as page content or user reports, is not yet available, so conclusions about the exact phishing mechanism remain preliminary.