iotrezo-starts[.]wixstudio[.]com

Analysis of iotrezo-starts.wixstudio.com shows that the domain was registered on April 07, 2026 through GoDaddy.com, LLC and is hosted on a Google Cloud server located in the United States (IP 34.144.206.118). The domain resolves to that IP and is served with a valid Let’s Encrypt TLS certificate. HTTP requests to the host currently return a 404 status, indicating that no content is being delivered at the time of testing. The domain appears on a single security blocklist and has been specifically blocked by PhishDestroy.

VirusTotal records indicate that six of ninety-four scanning engines have flagged the domain as malicious, providing additional corroboration of its suspicious nature. Nameserver delegation is handled by four nsone.net servers (dns1.p08.nsone.net through dns4.p08.nsone.net). The site’s operational status is listed as offline, suggesting that the phishing infrastructure has been taken down or is temporarily inactive.

However, the presence of multiple detection signals—blocklist listing, vendor flags, and targeted blocking by PhishDestroy—demonstrates that the domain was previously used for malicious activity consistent with generic phishing. Defenders should continue to block the domain and its associated IP address, monitor the IP for any future reactivation, and consider adding the domain to internal deny lists. Ongoing vigilance is advised, as the underlying cloud infrastructure could be repurposed for new campaigns should the operators resume activity.