studio-exiudus[.]wixstudio[.]com

The domain studio-exiudus.wixstudio.com is currently listed as a phishing indicator by multiple security services. VirusTotal reports that 14 of 91 scanning engines returned a positive classification, demonstrating a non‑trivial detection consensus. The site is actively blocked by the PhishDestroy remediation service and is present on at least one public blocklist, confirming that defensive infrastructure already recognizes it as hostile. Registration data shows the domain was created on 17 December 2016 and was provisioned through Wix Studio, a legitimate website‑building platform.

The age of the registration suggests the domain may have been repurposed or compromised rather than newly registered for a campaign, a pattern observed in long‑standing phishing infrastructures. No additional technical artefacts such as IP address, hosting provider, SSL certificate details, HTTP response codes, or page title have been disclosed, leaving the exact content and target brand of the phishing page unknown. Consequently, analysts cannot confirm the specific lure employed or the victim profile.

Defensive teams should treat the domain as malicious: add it to URL‑filtering and DNS‑allow‑list denial lists, ensure inbound and outbound traffic to the host is blocked, and monitor for any DNS lookups or HTTP requests to the sub‑domain. Given the active blocklist entry and multi‑vendor detections, any attempt to resolve or access the domain should be considered a high‑confidence phishing event. Continuous monitoring for new indicators, such as related sub‑domains or hosting changes, is recommended to maintain coverage.