trexor-suiteapp[.]wixstudio[.]com

PhishDestroy identifies trexor-suiteapp.wixstudio.com as an active fake login phishing domain under investigation. This Wix-hosted site mimics legitimate crypto service login pages to harvest credentials, posing a medium-high risk to users unaware of the deception. The domain was registered recently and leverages a Let’s Encrypt SSL certificate to appear trustworthy, but technical indicators and behavioral patterns strongly suggest malicious intent.

This domain resolves to IP 34.144.206.118 and currently shows 0 detections out of 95 engines on VirusTotal, indicating it has not yet been widely flagged by automated scanners. No entries were found on major blocklists such as Google Safe Browsing, PhishTank, or OpenPhish at the time of analysis. The domain uses a WixStudio subdomain (wixstudio.com), a legitimate hosting platform, which is frequently abused by threat actors to host convincing fake login pages. Despite the SSL certificate issued by Let’s Encrypt, the absence of reputation and the specific impersonation of a crypto login interface raise significant red flags.

To mitigate risk, users should avoid entering any credentials on this domain. If interaction is unavoidable, verify the URL carefully for misspellings or unusual subdomains, and check for HTTPS—but note that SSL alone is not a reliable indicator of safety. Use PhishDestroy’s real-time scanning tool to confirm legitimacy before proceeding. Report this domain immediately to your security team or via PhishDestroy’s platform to help block future access. Always enable multi-factor authentication on crypto accounts to reduce the impact of credential theft.