treziosstart[.]wixsite[.]com

PhishDestroy identifies treziosstart.wixsite.com as an active crypto drainer posing as a Trezor wallet service. The domain leverages Wix’s hosting infrastructure to deliver a convincing fake login portal, tricking users into entering seed phrases or private keys under the guise of transferring funds. Once credentials are harvested, threat actors behind this campaign drain victim wallets, often within minutes of submission. This domain has not yet been flagged by most antivirus engines, with VirusTotal showing 0 detections out of 95 scanners as of the latest check. The infrastructure relies on a Let’s Encrypt SSL certificate to appear legitimate, resolving to IP 34.144.206.118, which shares hosting with other known fraudulent sites. This domain was flagged under seed 09cc6f and remains active despite its malicious nature. VirusTotal’s lack of detection suggests either recent deployment or evasive tactics, such as dynamic content or delayed payload delivery. The Wix platform, while legitimate, is frequently abused for phishing due to its free hosting tier and trusted domain reputation. Registrar data indicates recent creation, though the exact date is redacted in public feeds. Blocklist aggregators have yet to widely blacklist this domain, leaving users exposed. Technical indicators include the use of a generic-looking subdomain (treziosstart) mimicking the legitimate Trezor brand (trezor.io), with no HTTPS certificate validation beyond Let’s Encrypt’s baseline issuance. Users who visited this domain should immediately revoke any entered credentials, transfer remaining funds to a new wallet, and scan devices for malware. Enable two-factor authentication on all crypto accounts and monitor transactions for unauthorized activity. Report the domain to PhishDestroy and local CERT teams to aid in takedown efforts. Avoid interacting with similar Wix-hosted domains promising crypto services, as they often serve identical drainer scripts. This advisory will be updated if indicators shift or additional intelligence emerges.