started-ioapp-trexor[.]wixstudio[.]com

This domain, started-ioapp-trexor.wixstudio.com, is currently under investigation for hosting a generic phishing site. Infrastructure analysis reveals it is registered through Wix.com Ltd. and resolves to the IP address 34.144.206.118. The domain appears on one security blocklist, specifically PhishDestroy, which has flagged it as malicious. Notably, the domain's nameservers are reported as NS_NOT_FOUND, an irregularity that may indicate misconfiguration or deliberate evasion of standard DNS practices. As of July 20, 2026, the domain remains active, and no further details regarding the specific content, targeted brand, or phishing kit in use have been confirmed. The absence of nameserver records does not inherently confirm malicious intent but warrants additional scrutiny, particularly given the domain's presence on a security blocklist. Defenders should treat this domain as potentially hostile and consider implementing network-level blocks or monitoring for connections to 34.144.206.118. Further analysis is required to determine the exact nature of the phishing campaign, including whether it targets specific credentials, payment information, or other sensitive data. At this stage, no brand impersonation or scam categorization has been verified, and the site's content remains unanalyzed.