appssuites-trezoe[.]wixstudio[.]com

The domain appssuites-trezoe.wixstudio.com was registered through Wix.com Ltd., a popular website‑builder service that often supplies shared hosting and DNS for many legitimate sites. Infrastructure analysis shows the domain resolves to the IP address 162.159.143.12, an address associated with Wix’s content‑delivery network. The DNS query returned no nameserver records (NS_NOT_FOUND), which may indicate a misconfiguration or deliberate omission to hinder attribution. The domain appears on a single public blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that at least one threat‑intelligence provider has classified it as malicious.

VirusTotal reports that the domain was scanned by 95 antivirus and URL‑reputation vendors; none of the scanners raised a detection at the time of analysis, but the absence of detections does not guarantee safety and should not be interpreted as a validation of legitimacy. No evidence of SSL/TLS certificates, HTTP response codes, Safe Browsing verdicts, OTX mentions, or page‑title metadata is available in the supplied intelligence, leaving those vectors unverified. Consequently, the primary observable indicators are the registrar association with Wix, the single blocklist entry, the PhishDestroy block, and the active resolution to a Wix CDN IP.

Defenders should add the domain to internal watchlists, monitor DNS queries for outbound connections to 162.159.143.12, and enforce URL filtering rules that reference the known blocklist entry. Because the site is still active, endpoint and web‑gateway solutions should be configured to block or alert on any attempt to access the domain, and security teams should continue to collect payloads or screenshots if a user interaction occurs to enrich future analysis. Continuous re‑evaluation is advised as additional intelligence (e.g., SSL details, page content, or new blocklist listings) may emerge.