trexorcdn-connect[.]wixstudio[.]com

Analysis indicates that the domain trexorcdn-connect.wixstudio.com is actively resolving to the IPv4 address 34.144.206.118. DNS queries return no authoritative name server records (NS_NOT_FOUND), which is atypical for legitimate services hosted on the WixStudio platform and may reflect deliberate obfuscation. The domain is flagged under the generic_phishing category and remains listed as active with a risk level of under_investigation. No additional infrastructure such as additional A records, CNAME chains, or associated sub‑domains have been disclosed. The lack of publicly visible name‑server information hampers attribution, and the hosting environment cannot be confirmed without further probing. Defenders should treat any traffic to this host as malicious, block the IP address and domain at perimeter firewalls, and monitor DNS logs for repeated resolution attempts. Incident response teams are advised to collect packet captures, perform sandboxed retrieval of the site content, and compare any observed payloads against existing phishing signatures. Because the site’s content has not been publicly analyzed, analysts should prioritize manual verification to confirm the phishing payload and to identify any credential‑harvesting forms that may be present.