jexliberty[.]wixstudio[.]com

On July 29, 2026, analysis of jexliberty.wixstudio.com confirms that the site is actively used for a generic phishing campaign. The domain was registered through the Wix Studio platform and has been in existence since 17 December 2016. Infrastructure observation shows the zone is served by four NS‑ONE name servers (dns1.p08.nsone.net through dns4.p08.nsone.net), a configuration commonly associated with Wix‑hosted sites.

The domain is listed on a security blocklist and has been explicitly blocked by the PhishDestroy sinkhole, indicating prior malicious activity. VirusTotal scans have returned detections from five of ninety‑one antivirus engines, reinforcing the suspicion of malicious content. No additional public intelligence such as page title, SSL certificate details, HTTP response codes, or geolocation data is currently available, leaving the precise payload and target brand undefined.

Because the domain is known to be used for phishing and is already flagged by multiple security services, defenders should add the domain to network and email filtering rules, monitor DNS queries for the listed name servers, and consider sinkholing the address space. Continuous re‑scanning with VirusTotal and periodic checks of blocklist status are recommended to capture any changes in detection coverage. The limited observable infrastructure combined with existing detections warrants an elevated risk rating and active mitigation.