appstarts-trexxorr[.]wixstudio[.]com

The domain appstarts-trexxorr.wixstudio.com is currently active and has been classified as a generic phishing threat. Infrastructure analysis shows the domain is registered through Wix.com Ltd., a widely used website‑hosting service. DNS resolution points to the IPv4 address 162.159.143.12; the associated nameserver entries could not be retrieved (NS_NOT_FOUND), indicating that standard DNS queries do not return a valid authoritative server record.

The domain appears on a single security blocklist, specifically PhishDestroy, confirming that at least one external threat‑intelligence source has flagged it for malicious use. VirusTotal records indicate that the domain has been scanned by ninety‑five independent security vendors; at the time of analysis none of those vendors reported a detection, though the absence of a detection does not constitute evidence of safety. The overall risk posture remains under investigation, and the domain’s status is listed as active.

Defenders should continue to monitor traffic to and from the associated IP address, enforce blocklist policies that include PhishDestroy entries, and consider adding the domain to internal deny lists pending further forensic examination. Because no public page title, SSL certificate details, or HTTP response codes have been disclosed, the content of the site remains unverified, and additional analysis is required to determine the specific phishing vectors employed. Until such data is obtained, precautionary network controls and user‑education measures are advised to mitigate potential credential‑harvesting attempts originating from this infrastructure.