started-trezxio[.]wixstudio[.]com

PhishDestroy identifies started-trezxio.wixstudio.com as an active credential-theft front under investigation for generic phishing. This WixStudio subdomain (started-trezxio.wixstudio.com) is currently serving a malicious landing page designed to harvest user credentials and session tokens, enabling account takeovers across multiple platforms. Visitors risk direct data compromise if any information is submitted.
This domain resolves to IP 34.144.206.118 and currently returns 2/95 detections on VirusTotal. The SSL certificate is issued by Let’s Encrypt, providing a misleading veneer of legitimacy. Creation date and registrar details remain unverified due to WixStudio’s masking; however, the absence of detections suggests a recently deployed, low-signature threat actor asset.
To mitigate exposure, users must refrain from entering any credentials or personal data. Administrators should immediately block the IP prefix 34.144.206.0/24 at the firewall and disable outbound access to the domain via DNS sinkholing. Report the domain to your email provider and to PhishDestroy’s seed 6d6725 for community-wide blocking. Exercise heightened scrutiny for any subsequent domains hosted on 34.144.206.118.