apps-trejorsiuite[.]wixstudio[.]com

The domain apps-trejorsiuite.wixstudio.com is currently active and resolves to the IP address 162.159.143.12. Registration information indicates the domain was created through Wix.com Ltd., a popular website‑builder platform that also supplies DNS services. The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service, suggesting that threat‑intel feeds have identified it as a malicious resource. A VirusTotal scan was performed by 95 independent scanning engines; none of the engines returned a positive detection for the domain at the time of analysis.

While the absence of detections does not constitute a safety guarantee, it does reflect that the payload or page content has not yet triggered known signatures. No additional infrastructure details such as ASN, country of hosting, or SSL certificate information were provided, and the page title or any brand‑specific targeting information remains unverified. Consequently, the precise phishing scenario—whether it mimics a login portal, financial service, or other credential‑harvesting vector—cannot be definitively described.

Defenders should continue to monitor the domain for changes in its hosting configuration, blocklist status, and any new detections from sandbox or URL‑reputation services. Organizations using network‑level filtering should add the domain to deny lists, especially if they employ Wix‑based services, and should consider enforcing strict outbound traffic controls to mitigate potential data exfiltration. Incident response teams should treat any user‑reported interactions with the domain as suspicious and initiate standard credential‑theft investigation procedures, including verification of user credentials and forced password resets where appropriate.