publictrezorzzo[.]wixstudio[.]com

PhishDestroy identifies publictrezorzzo.wixstudio.com as an active Trezor brand impersonation domain designed to deceive cryptocurrency users into surrendering sensitive wallet credentials. This fraudulent site mimics Trezor’s official branding with high-fidelity replication of UI elements, transaction flows, and support interfaces, creating a convincing replica to harvest private keys or seed phrases. The domain leverages Wix’s subdomain infrastructure (wixstudio.com) to bypass traditional hosting blacklists, exploiting legitimate services to host malicious content. SSL encryption via Let’s Encrypt further enhances perceived legitimacy, luring victims into a false sense of security while exfiltrating authentication data. This domain presents a medium-to-high risk profile, with technical indicators including zero detections on VirusTotal (4/95 engines) despite active phishing operations. The infrastructure resolves to IP 34.144.206.118, a Google Cloud Platform address frequently abused for ephemeral phishing campaigns. While the domain’s creation date remains unconfirmed, its current TLD registration through Wix Studios indicates recent deployment aimed at capitalizing on Trezor’s user base during high-volume transaction periods. The absence of blocklist coverage suggests this threat is in its early operational phase, with potential for rapid expansion across detection systems. Users who visited publictrezorzzo.wixstudio.com should immediately inspect browser history for unauthorized redirects and revoke any credentials entered on the site. Trezor users must verify all transactions through the official wallet interface at trezor.io and enable multi-factor authentication on associated email accounts. Report suspicious activities to Trezor’s support team and submit the domain to PhishDestroy or VirusTotal for analysis. Consider using hardware wallet cold storage for critical assets until the threat is neutralized. Users with exposed seed phrases should migrate funds to a new wallet with freshly generated keys.