homeokxapps[.]wixstudio[.]com

homeokxapps.wixstudio.com was observed on 29 July 2026 as an active phishing indicator with elevated risk. The domain was created on 8 June 2026 and registered through the Wix Studio service, a popular website‑builder platform. Early detection by the PhishDestroy blocklist confirms that the domain is actively being used for malicious credential collection. VirusTotal scans show that 13 out of 91 security vendors have flagged the domain as malicious, indicating a consensus among a subset of scanners despite the majority of engines returning no detection.

The domain is listed on a single external blocklist, which further corroborates its malicious status. Infrastructure details such as hosting IP address, autonomous system number, geographic location, SSL certificate properties, and HTTP response codes have not been published in the current intelligence set, limiting deeper network‑level analysis. Likewise, the page title and any brand‑specific lures have not been disclosed, so the exact phishing lure remains unknown. The absence of this data means that automated URL‑reputation services cannot yet provide a full risk score.

Given the current evidence, defenders should block or sinkhole homeokxapps.wixstudio.com at the DNS layer, add it to web‑proxy and email‑gateway deny lists, and monitor for any related subdomains created through the same Wix Studio registrar account. Continuous re‑scanning on VirusTotal or similar aggregators is advised to capture any changes in vendor detection. Organizations should also alert endpoint protection teams to watch for credential‑theft patterns that may be tied to this domain. The limited visibility underscores the need for rapid containment while additional forensic investigation is pursued.