global-io-trezer[.]wixstudio[.]com

Analysis of global-io-trezer.wixstudio.com indicates an active phishing domain targeting login credentials, flagged by multiple security mechanisms as of July 29, 2026. The domain was registered on June 8, 2026, through Wix Studio, a platform commonly used for both legitimate and malicious sites due to its ease of deployment. Infrastructure review reveals the domain is hosted on Wix's infrastructure, which provides SSL encryption by default, a factor often exploited by threat actors to lend superficial legitimacy to phishing pages. Thirteen of ninety-one security vendors on VirusTotal have flagged this domain, suggesting a consensus among a subset of detection engines regarding its malicious nature.

Additionally, the domain appears on at least one security blocklist, specifically PhishDestroy, which further corroborates its classification as a phishing threat. The exact content or brand impersonation remains unconfirmed, as no specific page title, brand target, or phishing kit details are available in the current intelligence. However, the domain's structure—global-io-trezer—suggests an attempt to mimic a corporate or cloud service portal, a common tactic in credential harvesting schemes. Defenders should treat this domain as elevated risk and implement blocking measures at the network and endpoint levels.

Given its recent registration and active status, monitoring for related domains or subdomains under the same Wix Studio account is recommended. Organizations should also review logs for connections to this domain, particularly from users who may have interacted with it under the assumption of legitimacy. No additional hosting details, such as ASN or geolocation, are available to further contextualize the infrastructure at this time.