ex-odusappcdn[.]wixstudio[.]com

This domain, ex-odusappcdn.wixstudio.com, is under investigation as an active phishing infrastructure hosted on Wix’s content-delivery network. As of July 22, 2026, the domain appears on one security blocklist (PhishDestroy) but is not currently flagged by any of the 95 vendors that have previously scanned it on VirusTotal. The absence of detections does not confirm safety, and defenders should note that scanning coverage may lag behind live threats. Infrastructure analysis reveals the domain resolves to IP address 162.159.143.12, which is part of Cloudflare’s network, a common hosting choice for both legitimate and malicious sites.

No nameservers are currently configured, which may indicate a misconfigured or short-lived phishing setup. The domain is registered through Wix.com Ltd., suggesting the attacker is leveraging Wix’s subdomain hosting to stage credential-harvesting pages. The exact content of the site has not been analysed, so the specific brand or service being impersonated remains unknown. Defenders are advised to treat this domain as high-risk until further analysis confirms its purpose.

Network-level blocking at the domain or IP level is recommended for organisations with active phishing controls. If internal telemetry shows user interaction with ex-odusappcdn.wixstudio.com, immediate incident response is warranted to assess potential credential exposure or follow-on compromise. Monitoring for newly associated domains or IPs within the same hosting range may help identify related infrastructure.