trexor-ioappsstarts[.]wixstudio[.]com

Analysis of trexor-ioappsstarts.wixstudio.com indicates that the domain is actively being used for a phishing campaign. The site was registered through Wix.com Ltd., a popular website‑building platform, and the domain resolves to the IP address 162.159.143.12. Infrastructure monitoring shows the domain appears on one external security blocklist and has been explicitly blocked by the PhishDestroy service, confirming that reputable anti‑phishing feeds have identified it as malicious.

A VirusTotal scan performed on the domain involved 95 independent scanning engines; none reported a detection, but the absence of alerts does not constitute evidence of safety, as many phishing pages evade automated signatures. No DNS NS records were retrievable, suggesting either a misconfiguration or intentional concealment of authoritative name servers. Additional intelligence such as Safe Browsing status, Open Threat Exchange mentions, SSL certificate details, HTTP response codes, trust‑score metrics, and page‑title content were not disclosed in the available data, leaving those vectors unverified at this time.

Given the confirmed blocklist presence, registrar affiliation, and IP hosting context, defenders should treat the domain as hostile. Recommended actions include immediately adding the domain to network and email blocklists, monitoring for any related sub‑domains or newly provisioned Wix sites, and employing URL filtering solutions that reference the PhishDestroy feed. Continuous re‑evaluation is advised, as the threat remains under investigation and could evolve to incorporate additional payloads or target different brands.