home-trezrio[.]wixstudio[.]com

Analysis of home-trezrio.wixstudio.com, observed on 27 July 2026, indicates that the domain is actively used for a generic phishing campaign. The domain was registered through Wix.com Ltd., a popular website‑builder platform, and the authoritative nameservers could not be resolved (NS_NOT_FOUND), suggesting reliance on Wix’s internal DNS handling. DNS resolution points to the IP address 162.159.143.12, a Cloudflare‑owned address commonly used for content delivery and proxying, which complicates attribution of the underlying host. The domain is listed on a single security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing the assessment of malicious intent.

VirusTotal has processed the domain with 91 scanning engines; none reported a detection at the time of analysis. While the lack of detections does not constitute evidence of benign behavior, it does indicate that the current scanner signatures have not yet flagged the observed activity. No public page title, SSL certificate details, or HTTP response code have been published, leaving the exact content and transport security unknown. Consequently, the precise phishing lure, target brand, or credential‑capture mechanism cannot be confirmed without direct content inspection.

Given the available data, the domain should be treated as malicious and added to network‑level blocklists. Security operations should monitor DNS queries for the IP 162.159.143.12 and enforce outbound filtering for connections to the host. Threat hunters may also consider querying additional passive DNS sources to identify any related sub‑domains or shared infrastructure. Continuous re‑evaluation is advised as new intelligence, such as page content or victim reports, becomes available.