webtrezo[.]wixstudio[.]com

This domain, webtrezo.wixstudio.com, is identified as a credential theft operation targeting user login credentials. As of the latest verification, the domain has been taken offline, though prior activity indicates malicious intent to harvest sensitive authentication details. Analysis reveals the domain was flagged by 12 of 95 security vendors on VirusTotal, with a trust score of 0/100. It was registered through GoDaddy.com, LLC on April 26, 2026, and resolved to the IP address 34.144.206.118. The domain appears on three security blocklists, including PhishDestroy and PhishingArmy. Infrastructure analysis indicates the use of Wix hosting, Let’s Encrypt SSL certificates, and Google Cloud services, including CDN and HTTP/3 protocols. The page title, "404 Error: Page Not Found | Wix Studio," suggests either a defunct phishing page or an attempt to evade detection post-compromise. The current offline status reduces immediate risk, but the domain’s prior configuration and detection history warrant continued monitoring. Organizations are advised to block the domain and its associated IP at the network perimeter. Users who may have interacted with the domain should reset credentials for any accounts accessed during the exposure window. Security teams should review logs for connections to 34.144.206.118 and monitor for similar domains leveraging Wix or Google Cloud infrastructure for credential theft operations.