startstrexxo[.]wixstudio[.]com

This domain, startstrexxo.wixstudio.com, is currently flagged as an active phishing threat with elevated risk. Infrastructure analysis reveals it is hosted on Wix Studio, a legitimate website builder, but the subdomain was registered through Wix on December 17, 2016, and resolves to IP address 34.144.206.118. The domain appears on one security blocklist, specifically PhishDestroy, and is detected by 13 of 91 security vendors on VirusTotal, indicating a confirmed malicious classification by multiple independent sources.

Nameservers are provided by NS1 (dns1.p08.nsone.net through dns4.p08.nsone.net), a reputable DNS provider, which does not inherently indicate compromise but is consistent with the hosting infrastructure used by Wix Studio. No specific brand target, phishing kit, or page title is provided in the available intelligence, so the exact content or impersonation target remains unconfirmed. Defenders should treat this domain as confirmed malicious based on the detection count and blocklist presence.

Immediate action is recommended, including blocking the domain and IP at the network perimeter, monitoring for internal access attempts, and reviewing logs for any prior connections. Given the domain's age and hosting on a well-known platform, it is likely being used opportunistically rather than as part of a large-scale campaign, but the elevated risk designation warrants proactive containment. Further analysis of HTTP headers, SSL certificates, and page content is advised if deeper investigation is required, though current evidence is sufficient for defensive measures.