trezo-trexor-oficial[.]wixstudio[.]com

PhishDestroy identifies trezo-trexor-oficial.wixstudio.com as an active fake-branded cryptocurrency phishing portal impersonating the legitimate 'Trezo Trexor' ecosystem. The site was built on the WixStudio platform to lend artificial credibility, hosting fraudulent 'investment' pages that promise unrealistic returns to lure victims into depositing cryptocurrency or sensitive credentials. Security telemetry confirms inbound traffic to 34.144.206.118 with a Let’s Encrypt SSL certificate, indicating active deployment since the seed b636e9 was first observed. This domain presents a direct financial threat to cryptocurrency users by masquerading as an official project. Analysis shows a VirusTotal detection ratio of 56 out of 95 engines at initial scan time, a domain created within the past 30 days, and hosted via Wix’s infrastructure at IP 34.144.206.118. The use of a legitimate SSL provider further increases deceptive trust. SOC monitoring has linked the infrastructure to only four prior blocklist entries, suggesting a recently spun-up operation with limited historical exposure. Organizations and individuals who may have visited or entered data should immediately inspect browser sessions for stored credentials, revoke any shared secrets, disconnect wallets linked to this domain, and report the activity to their security team. Users are advised not to engage with this site or share personal or financial information. Report sightings with full URL and timestamp to incident handlers for enhanced IOC enrichment and downstream detection.