trezoensuite[.]wixstudio[.]com

On July 22 2026 analysts observed the domain trezoensuite.wixstudio.com, created on March 22 2026 and registered through GoDaddy.com, LLC. The domain resolves to the IPv4 address 34.144.206.118, which belongs to Google Cloud infrastructure in the United States and is served behind the nameservers dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net. The site presents a TLS certificate issued by Let’s Encrypt and supports HTTP/3. An HTTP request returns a 404 status with the page title “404 Error: Page Not Found | Wix Studio”, indicating that the advertised content is no longer accessible. Technology fingerprinting identified the use of Wix, React, Google Cloud services and Google Cloud CDN.

The campaign is classified as brand impersonation targeting the cryptocurrency platform Sui. VirusTotal analysis shows the domain was scanned by 94 antivirus vendors, none of which reported a detection at the time of scanning. The domain appears on a single security blocklist and has been flagged by the PhishDestroy mitigation service. Although the site is currently offline, the infrastructure details—particularly the use of a reputable hosting provider and a valid Let’s Encrypt certificate—may lend superficial credibility to future iterations.

Defenders should continue to block the domain, monitor the associated IP range for re‑use, and update URL filtering rules to include the full hostname. Incident response teams should also consider the registrar GoDaddy.com, LLC as a potential source of low‑cost, rapidly provisioned domains used in impersonation campaigns. Ongoing vigilance is recommended until the threat is fully mitigated.