exova-io[.]wixstudio[.]com

The domain exova-io.wixstudio.com was registered on June 08, 2026 through the Wix Studio platform, which provides user‑generated subdomains. Within weeks of its creation the site was added to the PhishDestroy blocklist and is currently listed on an additional security blocklist. Independent scanning on VirusTotal shows that 12 of 91 antivirus and URL‑reputation engines have flagged the domain as malicious, indicating that a non‑trivial portion of the security community recognises it as a threat. The detection count suggests that the site exhibits characteristics commonly associated with credential‑harvesting pages, although the exact page content and targeted brand have not been publicly disclosed.

Infrastructure analysis is limited to the registrar information; no IP address, ASN, or SSL certificate details have been released, so the hosting environment cannot be fully profiled at this time. The presence on multiple blocklists and the early detection by PhishDestroy provide concrete evidence that the domain is being used for phishing operations. Defenders should proactively block exova-io.wixstudio.com at the DNS level and include it in URL filtering policies across web gateways and endpoint protection suites.

Continuous monitoring for any outbound connections to the domain is advised, and any observed traffic should be investigated for credential exposure. Because the site’s payload and targeted services remain unknown, additional dynamic analysis of the landing page, if accessed in a sandbox, would help clarify the phishing kit employed and refine detection signatures. Until further content is analysed, the domain should be treated as an active phishing source with elevated risk.