appsuite-trejzor[.]wixstudio[.]com

The domain appsuite-trejzor.wixstudio.com is currently flagged as an active generic phishing site. Registration data shows the domain was created through Wix.com Ltd., a platform that provides sub‑domain hosting and is frequently abused for malicious campaigns. DNS resolution points to the IP address 162.159.143.12, which belongs to the Cloudflare network and is commonly shared among many Wix‑hosted sites, indicating the use of a CDN/anycast service rather than a dedicated server. Infrastructure analysis therefore suggests that host‑based blocking would be noisy, and domain‑level controls are the most precise mitigation. The domain appears on one public security blocklist and is explicitly listed as blocked by the PhishDestroy feed, providing at least one independent indicator of malicious intent.

VirusTotal recorded scans from 91 independent vendors; none reported a detection, but the absence of detections does not constitute proof of safety, especially given the rapid turnover typical of phishing infrastructure. No additional information on SSL/TLS certificates, HTTP response codes, Safe Browsing status, Open Threat Exchange mentions, page title, or other content‑based attributes was available at the time of analysis. Consequently, the confidence level rests on the registrar, IP ownership, blocklist presence, and PhishDestroy designation. Defenders should continue to enforce domain‑level blocking across DNS resolvers, proxy filters, and endpoint web protection solutions.

Because the IP is shared with legitimate Wix services, broad IP blocking is discouraged. Continuous monitoring for any new sightings, updates to blocklist feeds, or changes in the domain's DNS records is recommended. If possible, analysts should retrieve the live page content and TLS metadata to enrich detection signatures and to confirm the phishing vector employed. Until further evidence emerges, the domain should be treated as malicious and included in internal threat‑intel repositories.