io-treser-starts[.]wixstudio[.]com

The domain io-treser-starts.wixstudio.com is flagged as a generic phishing infrastructure with an elevated risk rating. Registration data shows the domain was created on 17 December 2016 through the Wix Studio platform, indicating the use of a legitimate website‑building service to obtain a seemingly trustworthy host. The authoritative name servers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net, which are consistent with NSOne’s DNS service and do not immediately reveal a compromised hosting provider.

Threat intelligence from PhishDestroy lists the domain as blocked, confirming that at least one anti‑phishing feed has taken remediation action. VirusTotal analysis reports that 11 of 91 security vendors have flagged the domain, demonstrating modest but notable detection across multiple scanning engines. Additionally, the domain appears on a single security blocklist, further corroborating its malicious classification.

No public evidence was found for SSL certificate details, HTTP response codes, Safe Browsing status, OTX references, page title, or supplemental analysis links, leaving those vectors unverified at this time. Defenders should continue to block the domain at network perimeter and DNS filtering layers, monitor outbound traffic for connections to its NSOne name servers, and consider adding the domain to internal blocklists. Ongoing observation of any changes in detection counts, additional blocklist listings, or emergence of new hosting artifacts is recommended to maintain situational awareness.