downloadtrezor[.]wixstudio[.]com

PhishDestroy identifies downloadtrezor.wixstudio.com as an active brand-impersonation domain that lures users with a fake Trezor hardware wallet download page. The site uses Trezor’s branding and promises a “secure” wallet installer, but instead serves malicious software designed to steal crypto funds. Visitors risk losing all digital assets if they download or run any installer promoted on this page. This domain was flagged by PhishDestroy’s automated pipeline on seed 9d9102. Intelligence shows zero detections on VirusTotal out of 95 engines (0/95) as of the latest scan, confirming that mainstream scanners have not yet blacklisted the page. The domain resolves to IP 34.144.206.118 and uses a Let’s Encrypt SSL certificate to appear trustworthy, tricking users into believing the site is legitimate. Registrar data indicates recent creation, typical of short-lived phishing campaigns designed to evade detection. If you visited downloadtrezor.wixstudio.com, do not download or run any files offered on the page. Disconnect from the internet if you already clicked any installer, then use an up-to-date antivirus scanner on your device. If you entered any seed phrases or private keys, move remaining crypto to a newly generated wallet immediately and consider the original wallet compromised. Report the domain to Trezor’s official support and to PhishDestroy for takedown.