ioappsstarts-trexo[.]wixstudio[.]com

The domain ioappsstarts-trexo.wixstudio.com is currently flagged as a phishing campaign and remains active as of 16 July 2026. DNS queries return no authoritative nameserver records, indicating either an incomplete delegation or deliberate concealment of the hosting infrastructure. A forward lookup resolves the hostname to the single IP address 34.144.206.118, which is allocated to Amazon Web Services, a common cloud platform used by many malicious operators to obtain quickly provisioned hosting. No additional infrastructure such as CDN endpoints, secondary A records, or MX records are observable, limiting the visible attack surface to this sole address. VirusTotal has processed the domain with 91 scanning engines, yet none have reported a detection; this absence of alerts does not constitute evidence of benign intent and should be interpreted as a lack of known signatures rather than a clean bill of health. The limited intelligence prevents a definitive assessment of the payload or credential‑harvesting mechanisms that may be hosted at the resolved address. Consequently, defenders should treat the domain as suspicious until further forensic analysis of the web content is performed. Recommended mitigations include adding the domain and its IP to blocklists, configuring DNS sinkholing for future queries, and monitoring outbound traffic for connections to 34.144.206.118. Continuous re‑evaluation is advised, as changes in hosting or detection status may occur.