suitesapp-trrezor[.]wixstudio[.]com

PhishDestroy identifies suitesapp-trrezor.wixstudio.com as an active cryptocurrency wallet phishing domain currently under investigation for impersonation scams targeting Trezor users. This Wix-hosted subdomain (suitesapp-trrezor.wixstudio.com) is designed to mimic legitimate Trezor wallet interfaces, luring victims into entering recovery phrases or private keys under the guise of account verification or security updates. The threat remains active as of the latest analysis, with no takedown actions recorded to date. This domain was flagged by 4 of 95 VirusTotal vendors at the time of analysis, indicating a low initial detection rate despite its malicious nature. The site operates under Wix’s infrastructure with a Let’s Encrypt SSL certificate, resolving to IP 34.144.206.118. While specific creation date and blocklist counts are unavailable, the absence of VirusTotal detections suggests this phishing campaign may be newly deployed or employing evasion tactics. Trust scores for the domain and its hosting environment remain unassessed due to limited historical data. Given the active status and evasive characteristics of this domain, PhishDestroy recommends immediate avoidance of suitesapp-trrezor.wixstudio.com and any associated links. Users who have interacted with this site should revoke any entered credentials, transfer funds to a new wallet, and monitor for unauthorized transactions. Security teams are advised to block the domain at the network level and report indicators to threat intelligence platforms. The investigation into this campaign is ongoing, and updates will be provided as new intelligence emerges.