near-intenst[.]wixstudio[.]com

The domain near-intenst.wixstudio.com was created on June 08, 2026 and registered through the Wix Studio platform. Within days of its inception it appeared on a public security blocklist and was subsequently blocked by the PhishDestroy feed, which classifies the domain as part of an active generic phishing infrastructure. VirusTotal data show that five of ninety‑one scanning engines returned a malicious verdict, providing concrete evidence that multiple independent analysis tools have identified malicious characteristics. The elevated risk rating reflects the combination of recent creation, blocklist presence, and multi‑engine detections, despite the relatively low detection count that may indicate a still‑emerging payload or limited exposure.

Current intelligence does not disclose the underlying IP address, hosting provider, TLS certificate details, HTTP response codes, or the page title presented by the site. This lack of technical granularity means that the full network footprint cannot be mapped at present, but the absence of such information does not mitigate the observed threat indicators.

Defensive recommendations are to treat near-intenst.wixstudio.com as a high‑confidence malicious indicator. Organizations should immediately add the domain to DNS filtering, proxy, and endpoint web‑control blocklists, and enforce outbound traffic denial for any connections to the host. Security teams should cross‑reference internal email logs for recent user‑reported messages that reference the domain, and incorporate the PhishDestroy blocklist entry into automated detection pipelines. Ongoing monitoring is advised, as future analysis may reveal additional attributes such as hosting ASN, SSL fingerprint, or page content that could refine remediation actions. User awareness training that emphasizes verification of unexpected URLs remains a critical layer of protection against this active phishing campaign.