official-htxx-enus[.]wixstudio[.]com

On July 29, 2026, threat‑intel analysts examined official-htxx-enus.wixstudio.com, a domain created on December 17, 2016 and registered through the Wix Studio platform. The domain is currently listed on a single security blocklist, specifically PhishDestroy, indicating that it has been identified as malicious by at least one reputable filtering service. VirusTotal scans show that five out of ninety‑one security vendors have flagged the domain, providing independent confirmation of a phishing‑related payload.

The intelligence source classifies the activity as generic phishing, assigns an elevated risk rating, and marks the infrastructure as active. These data points collectively suggest that the domain is being used to host credential‑harvesting or fraudulent content, despite the lack of publicly disclosed page titles, SSL details, HTTP response codes, or hosting IP information. Because the hosting environment (Wix Studio) is a shared, legitimate web‑builder service, the domain’s age and registrar do not mitigate the observed malicious indicators.

Defensive operators should immediately block the fully qualified domain name at network perimeters, incorporate it into DNS sinkhole or proxy filtering rules, and ensure that endpoint protection solutions are updated to reflect the five vendor detections. Continuous monitoring for changes in hosting, certificate status, or additional blocklist listings is advised, as further infrastructure modifications could alter the threat profile. Integrating the domain into SIEM correlation logic and alerting on any authentication attempts directed at official-htxx-enus.wixstudio.com will help mitigate potential credential‑theft campaigns targeting end users.