into-bridge-cloud[.]wixstudio[.]com

This domain, into-bridge-cloud.wixstudio.com, is a confirmed phishing site impersonating the Trezor brand. The threat posed by this site is high, as it attempts to deceive users into believing it is an official Trezor service, potentially leading to the theft of personal information, including login credentials and financial data.

Analysis indicates that the domain was registered through GoDaddy.com, LLC. VirusTotal flagged the domain with a detection rate of 13 out of 95 security vendors, highlighting the consensus among security experts that the site is malicious. The domain was created and used to impersonate Trezor, leveraging technologies such as Wix, React, Google Cloud, and Google Cloud CDN. Infrastructure analysis reveals that the domain resolved to the IP address 34.144.206.118 and used an SSL certificate from Let's Encrypt. The site was blocked by multiple security blocklists, including PhishDestroy, PhishingArmy, and OISD, and is currently offline.

If a user has visited this domain, it is crucial to take immediate action to secure their accounts. Users should change their Trezor login credentials and monitor their financial accounts for any unauthorized activity. Additionally, users should run a full system scan to detect any malware that may have been installed. Reporting the incident to Trezor support can also provide further guidance and assistance.