startsso-trezriocdn[.]wixstudio[.]com

Analysis indicates that the domain startsso-trezriocdn.wixstudio.com was created on 17 December 2016 through the Wix Studio registration service. The domain is currently listed on a single security blocklist and has been explicitly blocked by the PhishDestroy filtering solution. VirusTotal reports that 15 out of 91 scanned security vendors have flagged the domain as malicious, which reflects a moderate consensus of detection across multiple engines.

The presence of a blocklist entry and the PhishDestroy block suggest that the domain is actively being used in malicious campaigns, consistent with its classification as a generic phishing threat. The registration via Wix Studio, a widely used website‑building platform, may provide the attackers with easy hosting and content‑management capabilities, but no additional infrastructure details such as IP address, ASN, or SSL certificate information are available in the supplied intelligence. Consequently, the precise hosting environment and any associated payload delivery mechanisms remain unknown.

Defenders should continue to enforce blocklist rules that include this domain, ensure that web filtering solutions such as PhishDestroy remain updated, and consider adding the domain to internal deny lists. Monitoring for any new resolution or hosting changes is advisable, as the lack of public IP data limits the ability to correlate traffic to other malicious infrastructure. Until further evidence is gathered, the domain should be treated as high‑risk for phishing attempts and users should be warned against interacting with any URLs pointing to it.