startsso-trezrapps[.]wixstudio[.]com

Analysis of startsso-trezrapps.wixstudio.com, observed on July 22 2026, shows that the domain is currently active and resolves to the IPv4 address 162.159.143.12. The domain is hosted under the Wix.com Ltd. registration service, and the authoritative name server information could not be retrieved (NS_NOT_FOUND). The domain appears on a single public security blocklist and is listed as blocked by the PhishDestroy feed, indicating that at least one anti‑phishing organization has identified it as malicious. A VirusTotal scan was performed by 95 independent scanners; none returned a detection, but the absence of detections does not constitute confirmation of safety.

No additional intelligence such as Safe Browsing status, OTX tags, SSL certificate details, or HTTP response codes is available in the current dataset. Consequently, the precise content of the site, the phishing kit in use, and the targeted brand remain unknown. The presence of a Wix‑provided registrar suggests the adversary leveraged a legitimate website‑building platform to obtain a short‑lived or disposable hosting environment. Defenders should continue to monitor the domain for changes in DNS resolution, blocklist listings, or detection signatures.

Organizations should add the IP address 162.159.143.12 to outbound and inbound filtering rules, and consider pre‑emptively blocking the domain at the proxy or firewall level. Incident response teams should treat any credential or personal data submissions to this domain as potentially compromised and advise affected users to reset credentials and review account activity. Ongoing collection of page content, HTTP headers, and SSL certificate details is recommended to refine the threat profile.