homepage-trexxio[.]wixstudio[.]com

PhishDestroy identifies homepage-trexxio.wixstudio.com as a newly active phishing page impersonating an invoice payment portal. This Wix-hosted domain is designed to trick visitors into entering sensitive payment details by mimicking a legitimate billing interface. The threat is classified as an invoice scam due to its focus on financial deception, leveraging urgency and familiar branding to coerce users into submitting credentials or payment data. Technical analysis shows the domain resolves to IP address 34.144.206.118 and holds a valid Let’s Encrypt SSL certificate, increasing its perceived legitimacy while concealing malicious intent.

This domain was flagged after VirusTotal analysis returned 0 detections out of 95 security engines, indicating it remains undetected by most antivirus platforms as of the latest scan. The site was created recently and is actively hosted on Wix’s platform (wixstudio.com), a legitimate website builder that has been abused to host phishing content. The domain uses a generic naming pattern (“homepage-”) likely intended to appear routine or internal, blending into legitimate web traffic. Monitoring shows the domain remains online and responsive, serving a spoofed invoice page designed to harvest credit card numbers and personal information.

If you visited homepage-trexxio.wixstudio.com, avoid entering any payment details, login credentials, or personal information. Disconnect from the site immediately and monitor your financial accounts for unauthorized transactions. Run a full antivirus scan on your device using updated security software. Report the domain to your bank or payment provider if you submitted sensitive data. Consider enabling two-factor authentication on all financial accounts and use a credit monitoring service. Never trust unexpected billing emails or pop-ups—always verify invoices directly through official channels using verified contact details.