home-apps-trexzor[.]wixstudio[.]com

Analysis of home-apps-trexzor.wixstudio.com indicates a brand‑impersonation campaign targeting the Trezor hardware‑wallet brand. The domain resolves to IP 34.144.206.118, which belongs to Google LLC (AS396982) and is geolocated in the United States. Hosting is provided through WixStudio, as reflected by the four nsone.net nameservers (dns1.p08.nsone.net through dns4.p08.nsone.net). A Let’s Encrypt certificate (YR1) is present, confirming the site operates over HTTPS, a common tactic to lend legitimacy.

The registrar listed is GoDaddy.com, LLC. The page title returned by the server reads "Trezor Hardware Wallet (Official) | Bitcoin & Crypto Security | Trezor," directly referencing the Trezor brand, and the HTTP response code is 404, suggesting the content may have been removed or is temporarily unavailable. The domain has been blocked by PhishDestroy and appears on a single security blocklist, indicating prior detection by at least one defensive feed. VirusTotal records show the domain was scanned by 91 vendors with no current detections, but this absence does not constitute proof of safety. The site is currently offline, and its risk level is marked as under investigation.

Defenders should continue to monitor the domain for any reactivation, block the domain at network perimeter and DNS filtering solutions, and add the associated IP and nameserver range to watchlists. Given the explicit brand reference and the use of a reputable SSL certificate, the domain fits known patterns of brand‑impersonation used to harvest credentials or lure cryptocurrency users. Organizations using Trezor wallets should alert users to verify URLs carefully and consider implementing URL filtering policies that include this domain and its hosting infrastructure.