trzwllet[.]wixstudio[.]com

Analysis as of July 29, 2026 shows that trzwllet.wixstudio.com is currently active and associated with a generic phishing campaign. The domain resolves to the IP address 34.144.206.118, indicating it is hosted on infrastructure that can be further inspected via the IP. Naming services are not disclosed (NS_NOT_FOUND), limiting immediate verification of authoritative name servers. The domain has been flagged by 11 of 91 security vendors on VirusTotal, demonstrating moderate consensus among scanners that the site hosts malicious content.

It is also listed on a single external security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that at least one dedicated anti‑phishing platform considers it malicious. No additional public data such as Safe Browsing status, Open Threat Exchange (OTX) references, registrar details, SSL certificate information, HTTP response codes, trust scores, or page title have been provided, leaving those vectors unverified. Defenders should prioritize immediate containment by adding the domain and its resolved IP address to outbound filtering rules and DNS blocklists. Continuous monitoring of the IP 34.144.206.118 for new hostnames or related activity is advised, as attackers often reuse hosting resources.

Integration of the PhishDestroy feed and the VirusTotal detection count into SIEM correlation rules will help surface any future attempts to exploit the same infrastructure. Because name server data is unavailable, threat hunters may consider querying passive DNS databases to uncover historical resolutions that could reveal additional malicious domains sharing the same hosting environment. Until further intelligence is obtained, the recommendation is to treat trzwllet.wixstudio.com as a high‑confidence phishing indicator and enforce strict network‑level denial.