us-bitunixx[.]wixstudio[.]com

The domain us-bitunixx.wixstudio.com was registered through the Wix Studio platform on December 17, 2016. Since that date the domain has been observed on a single public security blocklist and is actively blocked by the PhishDestroy sinkhole service. VirusTotal scans show that five of ninety‑one AV engines have raised detections, indicating that at least a subset of security products consider the host malicious. The presence of multiple detections, combined with the blocklist entry, aligns with the classification of a generic phishing operation as indicated by internal tagging.

No further technical artefacts such as IP address, autonomous system number, hosting country, SSL certificate details, HTTP response codes, or page title have been disclosed in the current intelligence set. Consequently, the exact infrastructure used to host the site, its content delivery method, and any credential‑harvesting mechanisms remain unknown. Defenders should continue to deny outbound connections to the domain, add it to local deny lists, and monitor DNS query logs for any attempted resolutions.

Network intrusion detection signatures that flag HTTP traffic to the host, as well as endpoint rules that block the known malicious URL patterns, are recommended. Because the domain is actively blocked by PhishDestroy, security teams can also leverage that feed to enrich their threat intel pipelines. Ongoing observation is advised; any new resolution to IP addresses, changes in SSL status, or additional vendor detections should be incorporated into detection rules promptly.