authstrt-terezor[.]wixstudio[.]com

This domain, authstrt-terezor.wixstudio.com, is flagged as a high-risk brand impersonation threat targeting Trezor, a cryptocurrency hardware wallet provider. Analysis indicates the site mimics the official Trezor.io/Start page, presenting itself as the legitimate "Trezor Suite App (Official)" portal. No explicit crypto drainer kit signatures were identified, but the infrastructure aligns with credential harvesting and wallet compromise tactics commonly used in cryptocurrency phishing campaigns.

Technical indicators confirm the domain's malicious classification. The domain resolves to IP address 34.144.206.118 and is registered through GoDaddy.com, LLC. VirusTotal detection shows 14 out of 95 security vendors flagging the domain as malicious. The site appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD. Technologies detected include Wix hosting, React framework, Google Cloud infrastructure, and HTTP/3 protocol. The SSL certificate is issued by Let's Encrypt, a common feature in both legitimate and malicious sites to avoid browser warnings.

As of the latest verification, authstrt-terezor.wixstudio.com has been taken offline, reducing immediate user exposure. However, residual risk persists due to potential re-activation or migration of the phishing infrastructure to alternative domains. Users who interacted with the site should assume credential or wallet compromise and take immediate remediation steps, including revoking active sessions, rotating passwords, and monitoring for unauthorized transactions. Organizations should update blocklists to include this domain and its associated IP to prevent future access attempts.