startapps-trzoio[.]wixstudio[.]com

Analysis of the domain startapps-trzoio.wixstudio.com indicates it is an active phishing infrastructure under investigation as of July 27, 2026. The domain is registered through Wix.com Ltd. and currently resolves to IP address 162.159.143.12, which is associated with Cloudflare's network. Infrastructure checks reveal the domain's nameservers are reported as NS_NOT_FOUND, suggesting potential misconfiguration or deliberate obfuscation of DNS records. The domain appears on one security blocklist, specifically PhishDestroy, though no additional blocklist entries or vendor detections are currently recorded.

VirusTotal scanning by 91 security vendors returned no detections, though this absence does not confirm the domain's safety or legitimacy. No brand impersonation, phishing kit, or specific scam type has been identified in available data, and the exact content or target of the phishing attempt remains unconfirmed. The domain's registration details and hosting provider align with common phishing tactics, particularly the use of Wix's subdomain services to rapidly deploy malicious sites. Defenders should treat this domain as potentially malicious based on its presence on a security blocklist and unresolved nameserver status.

Network-level blocking at 162.159.143.12 or domain-level filtering is recommended pending further analysis. Additional monitoring of related subdomains under wixstudio.com is advised, as this infrastructure may be reused for future phishing campaigns. No SSL certificate anomalies or HTTP status errors were reported, but the domain's active status and lack of detection history warrant continued scrutiny.