starsioapps-trezncdn[.]wixstudio[.]com

Analysis of starsioapps-trezncdn.wixstudio.com shows the domain remains active as of the report date. Registration information indicates the domain was created through Wix.com Ltd., a popular website‑builder platform that often provisions domains with shared hosting and Cloudflare‑fronted IP addresses. The domain resolves to 162.159.143.12, an address known to belong to Cloudflare’s network, which is commonly used by Wix‑hosted sites. Nameserver data is not publicly available (NS_NOT_FOUND), suggesting reliance on Wix’s internal DNS infrastructure.

Threat‑intel sources have flagged the domain as a generic phishing vector. It appears on a single security blocklist and is explicitly blocked by the PhishDestroy feed, confirming at least one independent vendor’s confidence in its malicious use. No additional detections from other vendors, Safe Browsing, OTX, or SSL/TLS analysis are available at this time, and no page title or content hash has been reported.

Given the limited visibility, the primary observable indicators are the domain name, its registration via Wix, and the Cloudflare‑assigned IP address. Defenders should consider adding starsioapps-trezncdn.wixstudio.com and 162.159.143.12 to outbound and inbound filtering rules, monitoring DNS queries for the domain, and correlating any related traffic with existing phishing incident response playbooks. Continuous re‑evaluation is advised, as further content analysis or additional vendor detections could provide more granular attribution.