en-librty[.]wixstudio[.]com

Analysis indicates that the domain en-librty.wixstudio.com was created on June 08, 2026 and registered through the Wix Studio platform. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy filtering service, demonstrating that at least one reputable anti‑phishing organization has observed malicious activity associated with it. VirusTotal scans show that 11 out of 91 security vendors have flagged the domain, providing multi‑engine confirmation of its suspicious nature. No additional public data such as IP address, hosting provider, ASN, SSL certificate details, HTTP response codes, or page title has been disclosed, leaving the underlying infrastructure largely opaque to current investigators.

The limited visibility suggests that the threat actor may be relying on the short lifespan of the site and the reputation of the Wix Studio hosting environment to evade deeper technical scrutiny. Defenders should treat the domain as hostile and add it to network‑level blocklists, DNS sinks, and endpoint protection denylists to prevent inadvertent connections. Security operations teams are advised to monitor outbound traffic for any DNS queries or HTTP requests to en-librty.wixstudio.com and to correlate logs with the 11 vendor detections for potential false‑positive validation.

Given the recent creation date, the domain may still be in an active phishing campaign, and rapid containment is recommended. Organizations that employ web‑filtering solutions should ensure that the blocklist entry from PhishDestroy is propagated across all enforcement points. Continuous re‑evaluation is necessary, as further intelligence—such as hosting details or payload characteristics—may emerge and refine the risk posture.