official-trexrsuite[.]wixstudio[.]com

Analysis indicates that the domain official-trexrsuite.wixstudio.com is currently active and flagged as a generic phishing threat. Registered through Wix.com Ltd., the domain resolves to IP address 162.159.143.12 but lacks configured nameservers, a technical anomaly that may indicate misconfigured or hastily deployed infrastructure. As of July 25, 2026, the domain appears on one security blocklist, though it remains unflagged by the 91 vendors that scanned it on VirusTotal. The absence of detections does not confirm safety, as phishing domains often evade initial scans through rapid rotation or obfuscation techniques.

Infrastructure analysis reveals the domain is hosted on Wix’s platform, which is frequently abused for phishing due to its free subdomain offerings and ease of deployment. The IP 162.159.143.12 is associated with Cloudflare’s network, a common choice for threat actors seeking to mask hosting origins or leverage CDN protections. No brand or specific scam type has been confirmed in the available data, and the exact content of the site remains unanalyzed.

Defenders should treat this domain as an active phishing risk, particularly given its presence on a security blocklist and the lack of nameserver configuration, which may suggest evasion tactics. Organizations are advised to monitor for connections to official-trexrsuite.wixstudio.com, implement network-level blocks if appropriate, and report the domain to additional threat intelligence platforms to improve detection coverage. Further investigation into the site’s content and targeting is recommended to determine the specific credentials or data being harvested.