homepage-trxzor-nav[.]wixstudio[.]com

Analysis of homepage-trxzor-nav.wixstudio.com as of 22 July 2026 indicates that the domain is actively being used for a generic phishing operation. The domain resolves to IP address 162.159.143.12, an address that belongs to the Cloudflare network and is commonly leveraged by Wix‑hosted sites. Registration data shows the registrar as Wix.com Ltd., a platform that provides free sub‑domains and hosting services.

The domain is currently listed on one external blocklist and has been flagged by the PhishDestroy feed, confirming its malicious intent. VirusTotal reports that the URL was submitted to 95 scanning engines, none of which returned a detection; the absence of a detection does not constitute a safety assurance and is consistent with prior observations that phishing pages often evade automated signatures. No page title, SSL certificate details, or HTTP response codes are available from the provided intelligence, and the nameserver information is missing (NS_NOT_FOUND), limiting deeper infrastructure attribution.

The limited evidence set therefore leaves the precise phishing target and payload unknown, but the combination of active resolution, hosting on a widely abused CDN, registrar association, and blocklist inclusion justifies a high‑confidence determination that the domain is being used for phishing. Defenders should block the domain at DNS or firewall level, monitor traffic to the associated IP for anomalous patterns, and consider adding the IP to threat‑intelligence feeds. Continuous re‑evaluation is recommended, as the risk level remains under investigation and the site is still active.