trezostrtsen[.]wixstudio[.]com

The domain trezostrtsen.wixstudio.com is operating as a fake Trezor wallet drainer designed to trick cryptocurrency users into connecting their wallets and authorizing fraudulent token transfers. This site mimics the official Trezor web wallet interface but does not belong to SatoshiLabs; instead, it hosts a malicious smart contract that drains tokens upon wallet connection. Once connected, the drainer can silently approve token transfers and steal assets without user confirmation. Users who visit this site risk losing all funds in connected wallets, including tokens stored in hardware wallets if the browser extension is active or the seed phrase is ever entered.

PhishDestroy identifies this threat based on multiple technical indicators. The domain was registered recently and currently shows zero detections on VirusTotal across 95 security engines, indicating it has evaded automated scanning tools. It resolves to IP address 34.144.206.118 and uses a legitimate Let’s Encrypt SSL certificate to appear trustworthy. The site is hosted on Wix’s platform under the studio.wix.com subdomain, which attackers often abuse due to weak isolation controls. While the exact creation date is not publicly available, the lack of detection history and fresh infrastructure suggests this campaign is newly active and spreading rapidly across social media and messaging platforms.

If you have visited trezostrtsen.wixstudio.com, disconnect your wallet immediately and revoke any unauthorized token approvals using tools like revoke.cash or Etherscan. Do not reconnect your wallet or enter any seed phrases. Scan your device for malware using reputable antivirus software and clear browser cache and cookies. Report this domain to PhishDestroy and your crypto wallet provider to help block the campaign. Always verify links by checking the official domain (trezor.io) and avoid clicking on unsolicited wallet connection requests.