eng-ndexpps[.]wixstudio[.]com

The domain eng-ndexpps.wixstudio.com was registered on 2026-06-08 through the Wix Studio platform, a service that provides hosted website builders. Within weeks of its creation the domain was added to the PhishDestroy blocklist and is also listed on an additional security blocklist, indicating that at least one protection service has observed malicious activity originating from the host. VirusTotal analysis shows that 12 out of 91 antivirus and URL‑reputation engines returned a positive detection for the domain, a signal that aligns with the elevated risk rating assigned by internal scoring.

The available intelligence does not include a page title, SSL certificate details, hosting IP address, or any explicit indication of the brand or service being spoofed. Consequently the exact phishing campaign vector, credential‑harvesting page layout, or targeted victim profile remain unknown. Analysts should treat the domain as hostile and enforce immediate network‑level blocking across perimeter firewalls, secure web gateways, and endpoint protection suites.

Continuous monitoring of DNS queries for eng-ndexpps.wixstudio.com is advised, as well as periodic re‑scans with VirusTotal and other sandbox services to capture any evolution in payload or hosting infrastructure. Organizations that employ URL filtering should add the domain to their deny list and consider sharing the indicator with internal threat‑sharing platforms to improve collective visibility. Until further forensic evidence is obtained, the recommendation is to maintain a deny‑by‑default posture for this domain and to alert security operations personnel of its presence in the environment.