authupholdtcomcdn[.]wixstudio[.]com

The domain authupholdtcomcdn.wixstudio.com is currently listed as active with an elevated risk rating. Registration data shows it was created on 17 December 2016 through the Wix Studio platform, and its authoritative name servers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net. Threat intelligence indicates that the domain appears on a single public security blocklist and has been explicitly blocked by the PhishDestroy mitigation service.

On VirusTotal the domain was observed by 91 scanning engines, of which 11 returned a malicious classification, confirming that a subset of security vendors consider the host to be involved in credential‑harvesting activity. The presence of multiple detections, combined with the blocklist entry and the PhishDestroy action, suggests that the infrastructure is being used for a generic phishing campaign targeting user credentials. No additional evidence such as SSL certificates, HTTP response codes, or page‑title information is available in the current dataset, leaving the exact landing page content unverified.

Defenders should treat network communications to this host as hostile. Recommended actions include adding the domain to DNS‑based deny lists, updating intrusion‑prevention signatures that reference the observed name‑server set, and monitoring outbound connections for any attempt to resolve or contact the four NSONE name servers. Continuous re‑evaluation is advised, as additional detections could emerge from future scanning or blocklist updates.