official-io-trezapp[.]wixstudio[.]com

This domain carries an elevated risk level and has been confirmed as a generic phishing operation specifically targeting cryptocurrency users by impersonating the Trezor hardware wallet brand. PhishDestroy analysts note that the domain mimics Trezor's official interface to trick victims into surrendering their recovery phrases or login credentials, a classic credential theft scheme aimed at draining crypto assets.

Technical indicators paint a clear picture of malicious intent. VirusTotal flags the domain with 3 out of 95 security vendors marking it as malicious, and it appears on one security blocklist. Registered through GoDaddy.com, LLC on April 21, 2026, the domain resolves to IP address 34.144.206.118 and uses a Let's Encrypt SSL certificate (R12) to appear legitimate. The current status is offline, indicating the hosting provider or registrar has taken action, but the site's 404 error page ("Page Not Found | Wix Studio") suggests it was hosted on Wix Studio's platform.

For anyone who may have interacted with this domain, immediate steps are critical. Users should never enter their Trezor recovery phrase or private keys on any website, especially one linked from unsolicited messages or search results. If credentials were entered, transfer all funds to a new wallet generated on a clean device, and enable two-factor authentication on associated accounts. Report the domain to Trezor's security team and consider running a malware scan on any device used to access the phishing site. Always verify official Trezor URLs—the legitimate domain is trezor.io—and bookmark it to avoid typosquatting attacks like this one.