us-exdus[.]wixstudio[.]com

The domain us-exdus.wixstudio.com has been identified as a malicious phishing resource and is currently active with an elevated risk rating. Registration data shows the domain was created on December 17, 2016 and was provisioned through the Wix Studio platform, a legitimate website‑builder service that can be abused for illicit hosting. Threat intelligence indicates the domain appears on one public security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that at least one reputable anti‑phishing organization has taken action against it.

VirusTotal analysis reveals that five of ninety‑one scanning engines have flagged the domain as malicious, providing independent corroboration of its malicious intent. No additional context such as page titles, SSL certificates, hosting IPs, or geographic location is available in the current data set, leaving the specific phishing lure and target audience undefined. Defenders should treat the domain as hostile: network perimeter devices, DNS filtering solutions, and endpoint security products should be configured to block any resolution or HTTP request to us-exdus.wixstudio.com.

Continuous monitoring of DNS query logs for this FQDN is advised, and any observed traffic should be investigated for credential harvesting or credential reuse attempts. Given the limited visibility into the payload served, threat hunters should also examine related request patterns that may indicate a broader campaign leveraging Wix‑based infrastructure. The combination of blocklist inclusion, vendor detections, and active block by PhishDestroy warrants immediate remediation to prevent user exposure.