startsio-trexrcdn[.]wixstudio[.]com

startsio-trexrcdn.wixstudio.com was created on 17 December 2016 and is registered through the Wix Studio platform, a popular website‑builder service that often provides free hosting and SSL certificates to its customers. The domain is presently classified as a generic phishing site with an elevated risk level and remains active as of the 29 July 2026 reporting date. VirusTotal analysis records 14 of 91 security vendors flagging the domain as malicious, reflecting a moderate detection consensus.

The domain appears on a single public blocklist and has been explicitly blocked by the PhishDestroy anti‑phishing service, confirming that at least one dedicated phishing mitigation platform has taken action against it. No further infrastructure details such as IP address, autonomous system number, geographic location, or SSL certificate fingerprint are present in the current intelligence set, and the page title or content has not been publicly disclosed, limiting the ability to assess the specific lures or credential‑capture mechanisms employed. The relatively low blocklist presence suggests that the campaign may be in an early or targeted phase, yet the existing detections justify immediate defensive response.

Security teams should incorporate the fully qualified domain name into URL filtering, DNS sinkhole, and web proxy block lists, and configure email security gateways to reject or quarantine messages that reference the domain. Continuous monitoring of VirusTotal and other scanning services is advised, as additional detections or new hosting information could emerge. Sharing observables with industry‑wide threat‑intelligence feeds will also help accelerate collective mitigation efforts.