trzzor-bridge[.]wixstudio[.]com

The domain trzzor-bridge.wixstudio.com has been identified as a fraudulent site that attempts to impersonate the hardware‑wallet brand Trezor. The domain was registered through GoDaddy.com, LLC on 22 March 2026 and is hosted on Google Cloud infrastructure, resolving to the IPv4 address 34.144.206.118, which is located in the United States. DNS resolution is served by the nsone.net name servers dns1.p08.nsone.net through dns4.p08.nsone.net. The site presents a TLS certificate issued by Let’s Encrypt, confirming that HTTPS is available, but the HTTP response returns a 404 status with the page title “404 Error: Page Not Found | Wix Studio”, indicating that the expected content is not currently served.

Technology fingerprints show the presence of Wix, React, Google Cloud CDN and HTTP/3, consistent with a typical Wix‑based deployment. VirusTotal has scanned the domain with 94 antivirus and URL‑reputation engines; at the time of analysis none of the engines reported a detection. The domain is listed on a single external blocklist and has been actively blocked by the PhishDestroy service, which classifies the activity as a crypto‑related scam. No additional public threat‑intel feeds such as OTX or Safe Browsing entries were observed.

Given the combination of a recent registration date, the use of a reputable TLS certificate, and the explicit impersonation of the Trezor brand, defenders should treat the domain as malicious despite the lack of current detections. Recommended mitigation steps include adding the domain and its IP address to network‑level deny lists, updating email and web‑filtering policies to block any URLs containing “trzzor‑bridge.wixstudio.com”, and monitoring for any future re‑hosting of the site. Continuous re‑scanning on VirusTotal and periodic checks of blocklist status are advised, as the offline status may change if the operators reactivate the site.