starts-trezos-apps[.]wixstudio[.]com

starts-trezos-apps.wixstudio.com has been identified as an active generic phishing infrastructure. VirusTotal records show that 13 of 91 scanning engines have flagged the domain as malicious, indicating a moderate consensus among security vendors that the site hosts or distributes phishing content. The domain is listed on a single public blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing its reputation as a threat vector.

Registration data reveals the domain was created on 17 December 2016 through the Wix Studio registrar, a platform commonly used for rapid website deployment, which can obscure the true operator behind the site. No public evidence of the page title, SSL certificate details, HTTP response codes, or hosting IP address is currently available, limiting a full infrastructural profile. Consequently, analysts cannot confirm the current hosting location or the presence of additional malicious payloads beyond the phishing classification.

Defenders should immediately add the domain to outbound and inbound URL filtering rules, incorporate it into threat‑intel feeds, and monitor for any DNS queries or network connections to the associated IP ranges used by Wix. Continuous re‑scanning with multi‑engine services is recommended to capture any changes in the site’s behavior, and any observed credential capture attempts should be treated as compromised. Organizations should also educate users about the risk of unsolicited login prompts that may reference the domain, as the lack of a visible brand name suggests a generic credential‑harvesting campaign.