com-startlizr[.]wixstudio[.]com

PhishDestroy identifies com-startlizr.wixstudio.com as a fake 'Startlizr' login phishing page hosted on WixStudio. The domain mimics legitimate services to harvest credentials. No known drainer kit has been linked to this campaign yet, but threat actors frequently reuse generic phishing templates for brand impersonation. The infrastructure appears designed to deceive users into entering login details under false pretenses, leveraging WixStudio’s reputable domain to bypass initial suspicion.

Technical analysis reveals this domain resolves to IP 34.144.206.118 and is secured with a Let’s Encrypt SSL certificate. VirusTotal currently shows 0/95 detections, indicating low antivirus coverage. The domain was registered under Wix.com (via WixStudio) and remains unblocked by Google Safe Browsing (GSB) as of this report. Despite minimal third-party flagging, the absence of detections does not confirm safety—phishing kits often evade detection until widespread abuse is reported.

This domain remains ACTIVE and under investigation. Users are advised to avoid interacting with com-startlizr.wixstudio.com and report it to security teams. The current risk is categorized as 'under_investigation' due to limited telemetry, but the threat model suggests high potential for credential theft. Immediate mitigation includes blocking the IP (34.144.206.118) and monitoring for associated IOCs. Remaining risk hinges on the campaign’s scale and whether it escalates to widespread exploitation.