us-ettro[.]wixstudio[.]com

The domain us-ettro.wixstudio.com is currently listed on a security blocklist and has been explicitly blocked by the PhishDestroy feed. Registration data shows the domain was created on 17 December 2016 and was provisioned through the Wix Studio registrar platform, indicating the site is likely hosted on Wix’s shared infrastructure. VirusTotal scans have returned 12 positive detections out of 91 submitted security vendors, confirming that multiple independent scanners have identified malicious activity associated with the domain.

The presence on a blocklist and the PhishDestroy block suggest that the domain is being used for phishing operations, consistent with the threat type classification of generic phishing. However, the specific phishing campaign details, such as the targeted brand, page content, or credential‑harvesting mechanism, have not been disclosed in the available intelligence. Consequently, the exact scope and victim profile remain uncertain.

Defenders should continue to block the domain at network perimeter controls, update DNS filtering policies, and monitor for any outbound connections to the associated IP ranges used by Wix’s hosting environment. Incident response teams should treat any login attempts or credential submissions to this domain as potentially compromised and advise users to avoid interacting with the site until further forensic analysis resolves the threat vector.