trxoresuites[.]wixstudio[.]com

This domain, trxoresuites.wixstudio.com, is a confirmed phishing infrastructure designed to impersonate Trezor, a hardware cryptocurrency wallet provider. The site presents itself as the official Trezor Suite platform, using the page title 'Trezor Suite® | Official Site® | Getting Started' to deceive victims into entering sensitive credentials, such as wallet recovery phrases or private keys. Such phishing attacks are commonly used to drain cryptocurrency assets from unsuspecting users by redirecting them to fraudulent interfaces that mimic legitimate services. Analysis indicates the domain was hosted on infrastructure associated with Wix, resolving to the IP address 34.144.206.118, and secured with a Let's Encrypt SSL certificate to appear legitimate. It was flagged by 12 out of 95 security vendors on VirusTotal, a significant indicator of malicious intent. The domain also appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD. Registration details point to GoDaddy.com, LLC as the registrar, though no creation date is available for this subdomain under WixStudio. Users who visited trxoresuites.wixstudio.com should immediately cease all interaction with the site and revoke any credentials or recovery phrases entered. Cryptocurrency wallets associated with the compromised credentials must be considered at risk; users are advised to transfer assets to a new wallet using a fresh recovery phrase. Additionally, monitoring for unauthorized transactions and reporting the incident to relevant security teams or cryptocurrency abuse platforms is recommended to mitigate further risks.