trzrebridge[.]wixstudio[.]com

PhishDestroy has flagged trzrebridge.wixstudio.com as an active crypto drainer phishing domain under investigation. This Wix-hosted subdomain appears to impersonate a well-known brand, leveraging a simple but effective lure to deceive users into connecting their wallets. The page likely prompts victims to sign malicious transactions that drain tokens directly from connected crypto wallets, a technique commonly associated with “ice phishing” campaigns. The infrastructure is minimal and hosted on a legitimate platform, making detection and takedown more challenging without proactive monitoring and user awareness. This domain resolves to IP address 34.144.206.118 and is served over HTTPS using a Let’s Encrypt SSL certificate. As of the latest scan, VirusTotal shows 0 detections out of 95 engines, indicating it remains undetected by most antivirus platforms. The domain was registered through Wix’s internal hosting service (Wix Studio) and does not appear in Google Safe Browsing (GSB) as of now. It has not yet been added to major threat intelligence blocklists, suggesting it is either very new or carefully crafted to evade early detection. The current status is active and under active investigation by PhishDestroy. Immediate response includes domain monitoring, takedown coordination with Wix, and sharing IOCs with trusted partners. While the risk is assessed as under investigation, users should exercise extreme caution when encountering this domain. The absence of detections and blocklist entries increases exposure, so verifying any links referencing this domain via PhishDestroy is strongly advised to prevent financial loss.