trexxors-io-startapp[.]wixstudio[.]com

Analysis as of July 24, 2026 indicates that the domain trexxors-io-startapp.wixstudio.com resolves to the IP address 162.159.143.12, which is hosted on infrastructure operated by Wix.com Ltd. The domain registration was performed through Wix.com Ltd., and attempts to retrieve authoritative nameserver records returned no results (NS_NOT_FOUND). VirusTotal has processed the domain with 91 commercial scanning engines; none of the engines reported a detection at the time of the scan, though the absence of detections does not constitute a safety guarantee. The domain is presently listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, indicating that at least one threat‑intel feed considers it malicious.

The threat type is catalogued as generic phishing, and the risk level remains under investigation while the campaign stays active. No public information is available regarding SSL certificate details, HTTP response codes, page title, or any observed malicious payload. Consequently, the primary observable indicators are the hosting association with Wix, the unresolved nameserver query, the blocklist entry, and the phishing classification.

Defenders encountering network traffic to this host should consider enforcing outbound filtering, monitoring DNS queries for the domain, and applying blocklist rules that include the identified IP address. Further investigation, such as sandbox execution of the landing page and analysis of any credential‑harvesting forms, is recommended to determine the full scope of the campaign.