suitesapp-trexio[.]wixstudio[.]com

PhishDestroy identifies suitesapp-trexio.wixstudio.com as a live phishing domain masquerading as Trexio, a legitimate financial data portal. This site is currently active and engaged in credential harvesting through a deceptive login page. The domain leverages Wix’s hosting infrastructure to lend an air of legitimacy, while its operational status and SSL certificate (issued by Let’s Encrypt) suggest ongoing malicious activity. Immediate containment and user awareness are critical to prevent financial fraud and data compromise.

This domain was flagged by 4 of 95 VirusTotal vendors at the time of analysis, indicating undetected threat activity. The domain is registered under Wix.com, Inc., resolving to IP 34.144.206.118, with a creation date of April 2024. It remains unlisted on major threat intelligence blocklists and carries a low trust score based on community and automated assessments. These neutral metrics highlight the stealthy nature of the operation, allowing the threat actor to evade early detection mechanisms.

The domain remains active despite its low detection rate. Organizations and end-users are advised to block suitesapp-trexio.wixstudio.com at the network perimeter and DNS level. Users should verify the authenticity of financial portals by cross-referencing URLs with official Trexio domains and enabling multi-factor authentication on all financial accounts. Security teams should monitor for similar Wix-hosted phishing campaigns and report this domain to threat intelligence platforms to improve collective detection capabilities.