my-bridge[.]wixstudio[.]com

The domain my-bridge.wixstudio.com is assessed as a high-risk brand impersonation threat targeting the cryptocurrency hardware wallet brand Trezor. The site was designed to mislead users into believing they were interacting with an official Trezor service, potentially leading to the theft of sensitive information or financial loss.

Infrastructure analysis reveals that the domain my-bridge.wixstudio.com resolves to the IP address 34.144.206.118. The domain was registered through GoDaddy.com, LLC, and currently appears on three security blocklists: PhishDestroy, PhishingArmy, and OISD. VirusTotal reports that 11 out of 95 security vendors flag this domain as malicious. The site's page title, 'Official Trezor® Bridge| Introducing the New Trezor™,' further indicates an attempt to impersonate the Trezor brand. The SSL certificate was issued by Let's Encrypt, a common choice for phishing sites due to its ease of use and free availability.

To mitigate the risks associated with this brand impersonation threat, users are advised to verify the URL and SSL certificate of any Trezor-related website before entering sensitive information. Security teams should configure network defenses to block the IP address 34.144.206.118 and the domain my-bridge.wixstudio.com. Additionally, organizations should educate employees and users about the importance of recognizing and reporting phishing attempts, particularly those that impersonate well-known brands like Trezor.