user-terzos[.]wixstudio[.]com

Analysis of user-terzos.wixstudio.com shows a domain registered with GoDaddy.com, LLC on April 07, 2026. The domain resolves to IP address 34.144.206.118, a Google Cloud host located in the United States. DNS resolution is served by the nsone.net name servers dns1.p08.nsone.net through dns4.p08.nsone.net. An SSL certificate issued by Let’s Encrypt is present, indicating that HTTPS was enabled at some point.

HTTP requests now return a 404 status, and the site is currently taken offline. The infrastructure has been blocked by the PhishDestroy feed and appears on one external security blocklist. VirusTotal scans report that five of ninety‑four antivirus and URL‑reputation engines flagged the domain, reinforcing the suspicion of malicious use. The only confirmed malicious behavior is the classification as a credential phishing campaign, suggesting that the site was intended to harvest login credentials.

Because the site is offline and returns a 404, content analysis such as page title or visual inspection is unavailable, leaving the exact phishing lure unknown. Defenders should continue to block the domain at perimeter defenses, add the associated IP address and name‑server set to deny‑list rules, and monitor for any re‑hosting of the same content on different hosts. Ongoing vigilance is advised given the elevated risk rating and the recent creation date, which indicates a short‑lived operational window typical of opportunistic phishing infrastructure.