gettrezobridge[.]wixstudio[.]com

The domain gettrezobridge.wixstudio.com was registered on March 22, 2026 through GoDaddy.com, LLC and is currently listed as taken offline. DNS resolution points to the IPv4 address 34.144.206.118, an endpoint hosted on Google Cloud within the United States. The authoritative name servers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net, indicating use of the NS1 service for DNS management. An HTTPS service is presented with a Let’s Encrypt certificate, but an HTTP request returns a 404 status and the page title "404 Error: Page Not Found | Wix Studio". The site’s technology stack includes Wix, React, Google Cloud, Google Cloud CDN, and HTTP/3, consistent with a typical Wix‑hosted site rather than a bespoke phishing landing page.

Threat intelligence classifies the domain as a crypto‑related brand impersonation targeting Trezor. It appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal analysis shows nine of ninety‑four security vendors flag the domain, providing additional corroboration of malicious intent. The combination of a recent registration, infrastructure hosted on a major cloud provider, a legitimate‑looking SSL certificate, and detection by multiple vendors aligns with patterns observed in brand‑impersonation campaigns that lure cryptocurrency users.

Because the site is offline, direct content analysis is limited to the observed 404 response and associated metadata. Defenders should continue to block the domain at perimeter and DNS layers, monitor for re‑activation or similar subdomains that reuse the same name server set or IP range, and consider adding the domain to internal threat feeds. Ongoing vigilance is advised for any future attempts to host phishing pages under the same infrastructure, especially given the confirmed targeting of the Trezor brand and the presence of the domain on existing blocklists.