appstarts-iotrezro[.]wixstudio[.]com

This domain, appstarts-iotrezro.wixstudio.com, is flagged as an active credential harvesting phishing infrastructure targeting users through deceptive login interfaces. Analysis indicates the threat type is generic_phishing, with no specific brand impersonation identified at this stage. The domain remains operational and under investigation for potential account compromise campaigns. Infrastructure analysis reveals the domain resolves to IP address 34.144.206.118, hosted on a platform that provides legitimate website building services. VirusTotal detection metrics show 0 of 95 security vendors have flagged this domain as malicious, suggesting either recent deployment or effective evasion techniques. The domain operates under the wixstudio.com subdomain structure, which may provide a veneer of legitimacy while obscuring its malicious intent. No historical registration data or creation date is available through standard WHOIS queries due to the subdomain structure, limiting temporal attribution. Current status indicates the domain remains active and unblocked across major security platforms. Organizations are advised to implement immediate network-level blocking of 34.144.206.118 and the full domain appstarts-iotrezro.wixstudio.com at perimeter defenses. Endpoint protection should be configured to detect credential harvesting patterns associated with this infrastructure. Security teams should monitor for authentication attempts originating from this IP address and conduct retrospective analysis of logs for potential prior compromise. Users should be educated about the risks of entering credentials on unfamiliar login portals, particularly those hosted on subdomains of legitimate platforms.