idp-bexio[.]com

The domain idp-bexio.com is currently active and classified as a high‑risk generic phishing operation. Registration information shows the domain was created through united-domains GmbH, and the authoritative name servers are ns.udag.de, ns.udag.net, and ns.udag.org. An HTTP request to the domain returns a 200 status code, indicating that a web service is reachable.

Threat intelligence indicates that the domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy filtering service. VirusTotal analysis reports that five out of ninety‑one security vendors have flagged the domain as malicious, providing additional corroboration of its abusive nature. No public IP address, hosting provider, or ASN data is available in the current intelligence set, and there is no disclosed SSL certificate or page title information to further characterize the site’s content.

The lack of visible brand or target information suggests the campaign relies on generic credential‑stealing tactics rather than a specific brand impersonation. Defenders should prioritize immediate containment by adding idp-bexio.com to DNS and web‑filter blocklists, monitoring for outbound connections to the domain, and correlating any observed traffic with the listed nameservers. Continuous re‑evaluation is advised, as additional detection data may emerge from further scanning or from other threat‑sharing platforms.