trezostartt[.]wixstudio[.]com

On 24 July 2026, analysis of trezostartt.wixstudio.com identified the site as a generic phishing infrastructure that has been taken offline. The domain was registered on 22 March 2026 through GoDaddy.com, LLC and resolves to the Google Cloud IP address 34.144.206.118, which is located in the United States. The TLS certificate is issued by Let’s Encrypt, indicating the use of a publicly‑available certificate authority. HTTP requests return a 404 status code and the page title reported is “404 Error: Page Not Found | Wix Studio”, suggesting that the original content was removed or never existed. Fingerprinting tools detected the Wix website builder, a React front‑end, Google Cloud services, Google Cloud CDN and HTTP/3 support, confirming the hosting environment.

Threat‑intel feeds show that 14 of 94 VirusTotal scanners flagged the domain, and the domain appears on one external blocklist. The PhishDestroy service has also blocked the site, reinforcing its classification as a phishing host. No additional public reputation services (e.g., Safe Browsing, OTX) were cited in the available data. The presence of the Wix stack and the generic 404 page makes it difficult to ascertain the exact phishing payload that may have been delivered before the takedown.

Given the limited visibility into the malicious content, defenders should continue to enforce blocklist rules that already include the domain, ensure DNS filtering solutions deny resolution of trezostartt.wixstudio.com, and monitor related subdomains under the same nameserver set (dns1‑dns4.p08.nsone.net). Network traffic to the associated IP should be inspected for any residual command‑and‑control or data‑exfiltration activity. Organizations employing web‑proxy or URL‑filtering products should add the domain to their deny lists and keep the entry for at least 90 days to cover any potential re‑use.