io-startd-trexor[.]wixstudio[.]com

Analysis of the domain io-startd-trexor.wixstudio.com indicates that it is currently active and associated with a generic phishing campaign. The domain was registered through Wix.com Ltd., a popular website‑builder service, and the authoritative name server information could not be retrieved (NS_NOT_FOUND). DNS resolution points to the IP address 162.159.143.12, which is a shared hosting address used by Wix’s infrastructure.

The domain appears on a single security blocklist and is actively blocked by the PhishDestroy filtering service, confirming that at least one defensive platform has identified it as malicious. A VirusTotal scan was performed by 95 antivirus and URL‑reputation vendors; none of the scanners raised a detection, but the absence of a flag does not constitute evidence of benign intent and should not be taken as assurance of safety. No additional reconnaissance data such as SSL certificate details, HTTP response codes, or page title information is presently available, limiting the depth of technical fingerprinting.

Given the registration through a legitimate SaaS provider, the lack of public name‑server data, and the presence on a blocklist, defenders should treat the domain as high‑risk until further analysis can confirm its behavior. Recommended mitigation steps include adding the domain to deny‑list rules in network firewalls, proxy filters, and endpoint protection suites, monitoring DNS queries for the associated IP address, and employing sandbox or URL‑reputation services to observe any payloads or redirects should the site be accessed. Continuous re‑evaluation is advised, as the threat status remains “under investigation” and the infrastructure may evolve.