trez-us-bridge[.]wixstudio[.]com

The domain trez-us-bridge.wixstudio.com is actively leveraged in a generic phishing campaign and has been assigned an elevated risk rating. Registration data indicates the domain was created on December 17, 2016 and was provisioned through the Wix Studio platform, a legitimate website‑builder service that can be abused for malicious hosting. The threat indicator set is currently blocked by the PhishDestroy sinkhole, demonstrating that at least one dedicated anti‑phishing service has observed malicious activity originating from this host. VirusTotal scans show that 11 of 91 security vendors have flagged the domain, providing a modest but notable consensus of malicious classification across independent scanning engines.

Additionally, the domain appears on a single external security blocklist, further confirming its presence on threat intelligence feeds. The combination of registration age, hosting environment, and multi‑vendor detection suggests a purposeful exploitation rather than incidental compromise. Defenders should treat any traffic to or from trez-us-bridge.wixstudio.com as hostile. Network perimeter controls ought to block outbound connections to the domain and inbound attempts to resolve it, while endpoint detection platforms should incorporate the observed vendor detections into their rule sets.

Continuous monitoring of Wix Studio‑hosted subdomains is advisable, as the platform’s shared infrastructure can host both legitimate and malicious sites. Analysts should also query additional threat feeds for any emerging indicators linked to this domain, such as IP address resolutions or TLS certificate changes, to refine detection accuracy. Until further forensic evidence becomes available, the prudent stance is to maintain the domain on blocklists, enforce strict URL filtering, and educate users about the elevated risk associated with unsolicited communications that may reference this address.