suiteapp-trexorr[.]wixstudio[.]com

Analysis of suiteapp-trexorr.wixstudio.com indicates that the domain is actively being used for phishing operations. The domain resolves to the IP address 34.144.206.118, which is part of the hosting infrastructure provided by Wix Studio, the registrar listed in the registration records. The domain was created on 17 December 2016, suggesting that the malicious infrastructure has been in place for several years.

VirusTotal scans show that 15 of 91 security vendors have flagged the domain as malicious, providing independent confirmation of its abusive nature. The site is currently listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the consensus that the domain is associated with phishing activity. No public evidence is available regarding the site’s SSL certificate, HTTP response codes, Safe Browsing status, OTX mentions, or page title, leaving those aspects of the infrastructure unverified at this time.

Defenders should continue to block the domain at network perimeters, update DNS filtering rules to include the associated IP address, and monitor for any new indicators that may emerge from additional scanning services. Given the confirmed phishing classification, organizations should treat any communications originating from or referencing suiteapp-trexorr.wixstudio.com as malicious and advise users to avoid interacting with links or credentials that appear to be sourced from this domain.