trzre-io-faqs[.]wixstudio[.]com

The domain trzre-io-faqs.wixstudio.com has been identified as part of a generic phishing campaign and is currently under active investigation by security researchers. This domain is now offline, returning a 404 error page, which suggests that either the hosting provider or the domain registrar has taken action to disrupt the malicious activity. Although no specific brand was impersonated in this case, the domain exhibits characteristics typical of phishing infrastructure, such as recent registration, association with a known security blocklist, and the use of a free SSL certificate from Let's Encrypt.

Technical analysis reveals several red flags. The domain was registered through GoDaddy.com, LLC, and was created on April 27, 2026, making it relatively new at the time of investigation. It resolves to IP address 34.144.206.118, which is hosted on Google Cloud Platform. VirusTotal reports 0 detections out of 95 antivirus engines, meaning the domain has not yet been widely flagged by security vendors. However, it does appear on at least one security blocklist, and the SSL certificate is issued by Let's Encrypt R12, a common choice for both legitimate and malicious sites. The domain's page title read "404 Error: Page Not Found | Wix Studio," indicating that the phishing content may have been hosted on a Wix Studio subpage that was subsequently removed.

Given that the domain is now offline and has no confirmed detections on VirusTotal, the immediate risk to users is low. However, because the domain was registered for phishing purposes, it could reappear under a different name or hosting arrangement. PhishDestroy recommends that users avoid visiting any similar domains and verify the legitimacy of any site requesting sensitive information. If you encounter this domain or related variants, report them to security teams and block all traffic to the associated IP address. Stay vigilant against generic phishing lures that may appear in emails or social media messages.