nav-trzosuite[.]wixstudio[.]com

The domain nav-trzosuite.wixstudio.com is currently classified as an active generic phishing site with an elevated risk rating. Registration records indicate the domain was created on 17 December 2016 and was provisioned through the Wix Studio registrar, which is commonly used for rapid website deployment. DNS resolution points to four NSONE nameservers (dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net) and resolves to the IPv4 address 34.144.206.118. The hosting infrastructure, as evidenced by the resolved IP, is shared with other Wix‑hosted assets, but no additional ASN or geographic data are disclosed.

Threat intelligence feeds have flagged the domain on a single security blocklist and it is actively blocked by the PhishDestroy service. VirusTotal analysis shows that 14 of 91 scanned security vendors have marked the domain as malicious, providing independent corroboration of its phishing intent. No public Safe Browsing or Open Threat Exchange (OTX) alerts are referenced in the available data, and the page title has not been supplied for further verification. At present, the specific phishing campaign payload, target brand, and credential collection mechanism have not been disclosed, leaving the exact lure unknown.

Analysts should therefore treat any login or data submission attempts originating from this host as potentially fraudulent and enforce strict verification of user‑supplied credentials. Given the convergence of registrar‑level abuse, DNS characteristics, blocklist inclusion, and multi‑vendor detection, defenders are advised to add nav-trzosuite.wixstudio.com to network deny lists, enforce URL filtering, and monitor outbound connections to the associated IP address. Continuous re‑evaluation is recommended, as additional indicators such as HTTP response codes, TLS certificate details, or content analysis may emerge from future scans.