official-trexosuite[.]wixstudio[.]com

This domain, official-trexosuite.wixstudio.com, is under active investigation as a potential phishing endpoint. Infrastructure analysis reveals it is hosted on Wix's platform (Wix.com Ltd.) and currently resolves to IP 162.159.143.12, an address associated with Cloudflare's network. The domain appears on one security blocklist, specifically PhishDestroy, which has flagged it for suspicious activity. No nameserver records were found during the initial check, which may indicate recent registration or an attempt to obscure DNS resolution paths. As of July 24, 2026, the domain remains active with no prior detections reported by the 91 security vendors that scanned it on VirusTotal.

The absence of detections does not confirm safety, as phishing domains often evade initial scans or are submitted after deployment. No additional context—such as page content, brand impersonation, or phishing kit signatures—has been analysed at this stage. The domain's registration details point to Wix as the hosting provider, which is consistent with legitimate use but also commonly exploited for phishing due to its ease of setup and free tier availability. Defenders should treat this domain with caution.

While no malicious payloads or fraudulent content have been confirmed, the blocklist inclusion and unresolved nameserver status warrant monitoring. Network-level blocking via the listed IP or domain is recommended for organisations using PhishDestroy's indicators. Further analysis, including HTTP response inspection and SSL certificate review, is required to determine the exact nature of the threat. If additional evidence emerges, such as phishing kit fingerprints or user reports of credential harvesting, the risk level may be reassessed.