suitesapps-trezro[.]wixstudio[.]com

Analysis of suitesapps-trezro.wixstudio.com indicates that the domain is actively hosting a generic phishing campaign. The domain resolves to the IPv4 address 162.159.143.12, which is part of the Wix.com Ltd. hosting infrastructure. Registration records show the domain was created through Wix.com Ltd., a widely used website‑builder platform, and the authoritative nameserver information is currently unavailable (NS_NOT_FOUND). The site is listed on one public security blocklist and has been explicitly blocked by the PhishDestroy sinkhole, confirming that at least one anti‑phishing service has taken remediation action.

A VirusTotal scan involving 95 antivirus and URL‑reputation engines returned no positive detections; however, the absence of detections does not constitute evidence of safety and should be interpreted as a lack of current signatures. No additional intelligence such as page title, SSL certificate details, or HTTP response codes has been disclosed, leaving the exact content and lure tactics of the landing page unverified. Consequently, defenders should treat the domain as hostile, enforce network‑level blocks, and add the hostname to internal allow‑list exclusions.

Continuous monitoring of the IP address and the hosting provider for further malicious activity is advised, as Wix‑based sites can be repurposed rapidly. Organizations employing URL filtering, DNS sinkholing, or endpoint web protection should ensure that suitesapps-trezro.wixstudio.com is included in block policies. Because the infrastructure is shared, compromised accounts on the Wix platform could generate new phishing pages under the same IP range, so periodic re‑assessment of the domain and related subdomains is recommended.