online-trezriocdn[.]wixstudio[.]com

As of July 28, 2026, the domain online-trezriocdn.wixstudio.com is under investigation for generic phishing activity. Analysis shows the domain is hosted at IP address 162.159.143.12 and registered through Wix.com Ltd. The infrastructure reveals an abnormality with nameservers as they are currently unresolved (NS_NOT_FOUND), which can indicate either technical misconfiguration or efforts to obscure the hosting arrangement. The domain is actively online and has been scanned by 91 vendors on VirusTotal, with none flagging it presently. However, lack of positive detections on threat intelligence platforms does not equate to a clean reputation, and caution is warranted given other indicators.

The domain has been placed on a single public security blocklist, specifically by PhishDestroy. Inclusion in any known blocklist is a significant risk indicator, especially when the blocklist specializes in phishing threats. No further evidence has been provided regarding page content, page title, SSL certificate status, or trust scores, and there is no intelligence from Google Safe Browsing or OTX included in the available data. The absence of such data means the specific purpose or targeting of the site has not yet been analyzed.

Defenders should treat this domain as suspicious given its blocklisting and unresolved nameserver status. It is recommended to monitor for any traffic to this domain within organizational networks and to block access while further analysis is conducted. Continued threat intelligence collection and infrastructure monitoring are advised to detect any updates to its risk profile or newly reported malicious activity. At this time, there is insufficient evidence to confirm the specific phishing technique or targeted brand. Defenders should await further investigation results and adjust mitigation steps as more details become available.