startioapp-trazor[.]wixstudio[.]com

The domain startioapp-trazor.wixstudio.com was registered through Wix.com Ltd., a legitimate website-building service that provides sub-domains under the wixstudio.com suffix. The domain resolves to the IP address 162.159.143.12, which belongs to the Cloudflare network and is commonly used as a reverse-proxy for many hosted sites. No nameserver records were returned (NS_NOT_FOUND), suggesting that the authoritative DNS information is either hidden behind Wix’s internal DNS management or not publicly resolvable. The domain is currently listed on a single security blocklist and has been actively blocked by the PhishDestroy feed, indicating that at least one security vendor has observed malicious use.

VirusTotal reports that the domain was scanned by 91 vendors, none of which raised a detection at the time of analysis; this absence of detections does not constitute evidence of benign behavior and may reflect the limited visibility of the content at the time of scanning. The threat classification in the intelligence is "generic phishing," and the overall status is marked as active and under investigation. No additional data such as SSL certificates, HTTP response codes, page titles, or content signatures were supplied, leaving the exact nature of the phishing payload unknown. Consequently, the primary observable indicators are the registrar (Wix.com Ltd.), the Cloudflare-hosted IP, the lack of public nameserver records, and the presence on the PhishDestroy blocklist.

Defenders should consider adding startioapp-trazor.wixstudio.com to URL filtering and DNS-based deny lists, monitor outbound connections to the associated IP, and enforce strict email gateway rules that flag messages containing this domain. Continuous re-scanning with reputation services is recommended, as the domain may evolve or become associated with additional malicious infrastructure. Until further forensic evidence is obtained, precautionary blocking remains the most effective mitigation.