trejor-homeapps[.]wixstudio[.]com

Analysis of the domain trejor-homeapps.wixstudio.com indicates it is an active phishing infrastructure hosted on Wix's proprietary platform, WixStudio. The domain was registered through Wix.com Ltd. and currently resolves to the IP address 162.159.143.12, which is part of Cloudflare's network, a common hosting choice for both legitimate and malicious sites. As of July 27, 2026, the domain appears on one security blocklist, specifically PhishDestroy, which has flagged it for phishing activity. No additional blocklist detections or vendor flags are present at this time, including from VirusTotal, where 91 security vendors scanned the domain without raising alerts.

The absence of detections in VirusTotal does not confirm the domain's safety, as phishing campaigns often evade initial scans through rapid deployment or obfuscation techniques. Infrastructure analysis reveals the domain lacks configured nameservers, a potential indicator of misconfigured or hastily deployed phishing pages. The domain remains active, and while the exact content of the site has not been fully analyzed, the classification as a credential harvesting site is based on its presence on a phishing-specific blocklist and its hosting context. Defenders should treat this domain as high-risk for credential theft, particularly given its association with WixStudio, a platform frequently exploited for short-lived phishing campaigns due to its ease of use and free-tier availability.

Organizations are advised to block access to trejor-homeapps.wixstudio.com at the network level and monitor for any connections to the IP 162.159.143.12 that may indicate compromised endpoints. Security teams should also review logs for any user interactions with the domain, as credential harvesting pages often rely on social engineering to trick victims into submitting sensitive information.