started-trazo[.]wixstudio[.]com

PhishDestroy identifies started-trazo.wixstudio.com as a live generic phishing domain currently active in the wild. The site is being used to harvest user credentials and payment details under the guise of a legitimate invoice or transaction portal. No specific brand impersonation has been confirmed at this time, but the domain leverages a deceptive subdomain structure intended to appear innocuous to end-users.

This domain was flagged by 4 of 95 VirusTotal vendors one day after creation, indicating minimal detection coverage despite active abuse. It resolves to IP address 34.144.206.118, hosted on Wix infrastructure via WixStudio, and secured with a Let’s Encrypt SSL certificate. The domain is currently under investigation, and historical blocklist or domain trust metrics have not yet been published. Given its recent activation and low detection rate, this domain represents a high-risk entry point for credential theft and financial fraud.

PhishDestroy categorizes started-trazo.wixstudio.com as an active threat under “under_investigation” status. Users are advised to avoid clicking any links or entering sensitive information. Organizations should consider blocking the domain and IP at the network perimeter. If exposure occurs, reset passwords, monitor for unauthorized transactions, and report suspicious activity to incident response teams. This threat underscores the need for continuous monitoring of newly registered and low-prevalence domains hosted on reputable platforms, as they can be rapidly weaponized for phishing.