eng-exiudus[.]wixstudio[.]com

This domain, eng-exiudus.wixstudio.com, is currently flagged as an active generic phishing infrastructure. The domain resolves to the IPv4 address 162.159.143.12, which is owned by the Wix.com hosting platform. Registration details show that the domain was created through Wix.com Ltd., a provider that offers website‑building services and often hosts short‑lived phishing sites.

The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy filtering service, indicating that at least one vendor has observed malicious activity originating from this host. No authoritative name server records were returned during DNS lookup (NS_NOT_FOUND), which may be a result of misconfiguration or intentional obfuscation to hinder attribution. The lack of additional public data—such as SSL certificate information, HTTP response codes, page titles, or Safe Browsing verdicts—means that the full scope of the phishing campaign cannot be precisely determined at this time.

Analysts should monitor DNS queries for this hostname, enforce blocklists that include the associated IP address, and consider adding the domain to internal deny lists. Because the hosting provider is a shared service, any compromise could affect other tenants; therefore, security teams should also review traffic patterns for other Wix‑hosted domains that exhibit similar characteristics. Continuous re‑evaluation is recommended as new intelligence, such as additional blocklist listings or detection vendor reports, becomes available.