engtoro[.]wixstudio[.]com

The domain engtoro.wixstudio.com is currently classified as a generic phishing campaign and is considered active with an elevated risk rating. Registration information shows the domain was created on December 17, 2016 and was provisioned through the Wix Studio platform, indicating a legitimate hosting provider was used for the initial setup. The authoritative nameservers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net, which are typical of NSOne services and do not, by themselves, imply malicious intent. VirusTotal scans have recorded 12 of 91 security vendors flagging the domain, providing modest but notable detection coverage across multiple scanners.

The domain appears on one external security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, confirming that at least one reputable anti‑phishing feed has catalogued it as malicious. No public records of Safe Browsing status, Open Threat Exchange (OTX) entries, SSL/TLS certificate details, HTTP response codes, trust scores, or page title information are available in the current intelligence set, leaving those vectors unverified. Consequently, defenders lack concrete evidence about the underlying web content, certificate validity, or network behavior beyond the listed detections.

Recommended defensive actions include adding engtoro.wixstudio.com to DNS sinkhole or firewall block rules, ensuring that outbound connections to any IPs resolved from its nameservers are denied, and ingesting the domain into existing security information and event management (SIEM) correlation rules. Continuous monitoring of VirusTotal and other multilayer scanning platforms for changes in detection counts, as well as periodic re‑query of Safe Browsing and OTX databases, will help track any evolution in the threat profile.