strt-trzrio[.]wixstudio[.]com

This domain, strt-trzrio.wixstudio.com, was identified as a credential theft operation impersonating Wix Studio infrastructure. Analysis indicates the threat actor designed the page to harvest login credentials, likely targeting users of the Wix platform or visitors expecting legitimate Wix-hosted content. The domain employed social engineering tactics to deceive victims into entering sensitive information, which could then be exploited for unauthorized access to accounts or further malicious activity. Infrastructure analysis reveals the domain was registered on April 26, 2026, through GoDaddy.com, LLC, and resolved to the IP address 34.144.206.118. Security vendors flagged the domain with a VirusTotal detection ratio of 13/95, while three independent blocklists—PhishDestroy, PhishingArmy, and OISD—listed it as malicious. The domain utilized a Let's Encrypt SSL certificate and was hosted on Wix infrastructure, leveraging technologies such as React, Google Cloud, and Google Cloud CDN. Despite its current offline status, the domain's creation date and technical setup suggest a deliberate attempt to exploit trust in the Wix brand. Users who visited strt-trzrio.wixstudio.com should immediately revoke any entered credentials, particularly for Wix or associated accounts. Monitor financial and digital accounts for unauthorized activity, as stolen credentials may be used for follow-up attacks. If browser sessions were active during the visit, clear cached data and reset passwords using multi-factor authentication where possible. Organizations should update blocklists to include this domain and its resolving IP to prevent future access attempts. Given the domain's high-risk classification and offline status, continued vigilance is advised for similar impersonation attempts targeting cloud-based hosting platforms.