clixor-en[.]wixstudio[.]com

The domain clixor-en.wixstudio.com was registered through Wix Studio on June 08, 2026. VirusTotal has recorded detections from 10 of 91 security vendors, indicating that a subset of scanners have identified malicious behavior associated with the host. The domain is currently listed on a single security blocklist and is actively blocked by the PhishDestroy service. These data points collectively suggest that the domain is being used in a phishing campaign, consistent with the generic phishing threat type assigned in the intelligence feed. The 10 vendor detections represent an 11% detection rate, which, while not universal, aligns with typical early‑stage phishing infrastructure where some scanners have yet to update signatures.

The presence on a single blocklist indicates limited but actionable visibility; defenders should verify whether additional blocklist providers have added the domain as the campaign matures. Evidence is limited to the registration record, the VirusTotal detection count, and the blocklist entries. No public IP address, hosting ASN, or SSL certificate details have been disclosed, and no page title or content analysis is available. Consequently, the full scope of the infrastructure and the specific tactics employed by the operators remain uncertain. Because the registrar is a widely used website‑builder platform, abuse of such services is common, and the lack of public IP information suggests the site may be hosted behind shared infrastructure, complicating takedown efforts.

Defenders should treat traffic to clixor-en.wixstudio.com as malicious. Immediate actions include adding the domain to outbound filtering rules, ensuring that URL filtering solutions flag it, and monitoring for related indicators such as the same registrar or similar sub‑domains. Continuous observation of VirusTotal and blocklist updates is recommended to capture any changes in detection coverage.