intolezer[.]wixstudio[.]com

PhishDestroy assesses intolezer.wixstudio.com as an active credential harvesting phishing threat currently under investigation. This domain appears designed to deceive users into submitting sensitive login credentials, a specific form of phishing that targets account security. Given the ongoing status of the investigation, users and security teams should maintain heightened vigilance when encountering this domain.

intolezer.wixstudio.com has been flagged on 2 distinct security blocklists, namely OpenPhish and PhishingArmy, indicating verified reports of malicious activity. Despite this, VirusTotal reports 0 detections out of 95 antivirus engines, suggesting the phishing infrastructure may be relatively new or evading conventional detection. The domain uses a Let's Encrypt SSL certificate, which provides basic encryption but is often exploited by attackers for legitimacy. The resolved IP address for this domain is 34.144.206.118, which can be used for network-level blocking or monitoring. The domain is registered via Wix Studio, a popular site builder, which threat actors frequently abuse to set up fraudulent pages quickly.

To mitigate risk from credential harvesting attacks like those posed by intolezer.wixstudio.com, organizations should implement multi-layered defenses. These include monitoring and blocking known malicious domains and IP addresses such as 34.144.206.118, employing advanced email filtering to detect phishing lures, and educating users on verifying URLs before submitting credentials. Deploying multi-factor authentication significantly reduces the impact of stolen credentials. Additionally, security teams should continuously update blocklists and threat intelligence feeds to detect evolving phishing infrastructure promptly.