official-trzxxor[.]wixstudio[.]com

This domain, official-trzxxor.wixstudio.com, is flagged as an active credential harvesting phishing site. Analysis indicates the infrastructure is designed to impersonate legitimate login portals, likely targeting users of financial or corporate services. The domain remains operational and under investigation for fraudulent activity. Infrastructure analysis reveals the domain is hosted on IP address 34.144.206.118, with no prior detection by security vendors—0 of 95 VirusTotal engines have flagged it. The domain is registered under the Wix Studio platform, which provides hosting services for custom subdomains. No historical blocklist records or trust score deviations were identified during initial triage, suggesting the campaign may still be in an early deployment phase. Current status remains active, with no takedown or mitigation measures observed. Organizations are advised to block the domain and associated IP at perimeter security controls. Users should be alerted to avoid entering credentials on this site, and security teams are recommended to monitor for related subdomains or IPs linked to 34.144.206.118. Further investigation is required to determine the full scope of targeted brands or services.