trzriostrt[.]wixstudio[.]com

PhishDestroy analysts have flagged trzriostrt.wixstudio.com as an active credential harvesting domain operating under a WixStudio subdomain. This site is designed to trick users into submitting sensitive login credentials under the guise of a legitimate service, with no current antivirus detection despite its malicious activity. The domain resolves to a Google Cloud IP (34.144.206.118) and leverages a Let's Encrypt SSL certificate to appear trustworthy, though its true intentions remain clear upon inspection. This domain exhibits several red flags that confirm its malicious status. VirusTotal analysis reveals zero detections out of 95 security engines, indicating it has evaded signature-based detection thus far. The subdomain (trzriostrt.wixstudio.com) suggests an attempt to impersonate or spoof a legitimate Wix-hosted service, while the hosting infrastructure (34.144.206.118) is associated with cloud-based malicious campaigns. No historical blocklist data is available at this time, which may explain its low detection rate despite active phishing operations. Users who may have interacted with this domain should immediately check for unauthorized login attempts or credential leaks. If credentials were entered, change passwords immediately and enable multi-factor authentication where possible. Avoid reusing passwords across services and monitor accounts for suspicious activity. Report any interactions with this domain to your security team or relevant authorities to aid in takedown efforts.