iostart-trexioapps[.]wixstudio[.]com

Analysis indicates that the sub‑domain iostart-trexioapps.wixstudio.com was registered on 08 June 2026 through the Wix Studio platform. Within weeks of creation the domain entered security blocklists; it currently appears on one blocklist and has been actively blocked by the PhishDestroy service. VirusTotal scans show that 12 of 91 anti‑malware engines flag the domain as malicious, confirming a consensus of detection across multiple vendors. The domain’s hosting is provided by Wix, a widely used website‑builder service, which may obscure the underlying IP address and SSL certificate details; no public TLS fingerprint or HTTP response code has been published in the available intelligence.

Safe Browsing status, Open Threat Exchange entries, and page‑title metadata have not been disclosed, leaving those vectors unverified. Defenders should treat any traffic to iostart‑trexioapps.wixstudio.com as potentially hostile. Immediate actions include adding the host to outbound allow‑list blocks, updating intrusion‑prevention signatures, and monitoring DNS queries for the domain.

Incident response teams should also query the Wix Studio registrar for any abuse reports, and leverage threat‑intel feeds that reference the 12 VirusTotal detections to enrich detection rules. Because the domain was created only a month ago, its full infrastructure—such as associated command‑and‑control servers or credential‑harvesting pages—remains unknown; continuous observation is recommended to capture any future changes in hosting, SSL deployment, or page content. Until further evidence emerges, the domain should be regarded as an elevated‑risk phishing infrastructure.