trez-io-started[.]wixstudio[.]com

The domain trez-io-started.wixstudio.com is identified as a brand impersonation threat targeting the Trezor brand and is currently offline. This domain poses an elevated risk due to its deceptive nature and potential to compromise user credentials and financial information.

Analysis indicates that this domain is flagged by 7 out of 95 security vendors on VirusTotal. The domain is registered through GoDaddy.com, LLC, and resolves to the IP address 34.144.206.118. It was created on April 12, 2026, and appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD. The Gridinsoft trust score for this domain is 0 out of 100, indicating a significant lack of trustworthiness. The SSL certificate is issued by Let's Encrypt, which is a common choice for phishing sites due to its ease of use and low cost. Technologies detected on the domain include Wix, Envoy, React, Google Cloud, Lodash, HSTS, Google Cloud CDN, and HTTP/3.

The current status of the domain is offline, reducing the immediate threat to users. However, it is recommended that organizations and individuals remain vigilant and update their security configurations to block this domain. Security teams should monitor for any reactivation of the domain and ensure that users are educated on the signs of brand impersonation and phishing attempts. Additionally, implementing multi-factor authentication (MFA) and regularly updating security protocols can help mitigate the risk of credential theft and other related threats.