browser-extens[.]wixstudio[.]com

The domain browser-extens.wixstudio.com is flagged as an active generic phishing infrastructure with an elevated risk rating as of July 29, 2026. VirusTotal records show that 13 of 91 security vendors have flagged the domain, indicating a measurable detection profile across multiple scanners. The domain was originally registered on December 17, 2016 through the Wix Studio platform, and its authoritative DNS is served by four nsone.net name servers (dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net).

The registrar information and the use of a widely‑available website‑builder service suggest the operators are leveraging legitimate hosting services to obscure attribution. The domain appears on a single external blocklist and is specifically listed as blocked by the PhishDestroy service, confirming that at least one anti‑phishing organization has taken remediation action against it. No additional public intelligence such as page titles, SSL certificates, or host‑level geolocation data has been disclosed, leaving the precise content and target brand of the phishing campaign unverified.

Consequently, the current evidence base consists primarily of registration metadata, DNS configuration, and the multi‑vendor detection count. Defenders should proactively block browser-extens.wixstudio.com at network perimeter and endpoint controls, incorporate the domain into existing phishing‑email detection rules, and monitor for any related sub‑domains or variations that share the same name‑server set. Continuous re‑evaluation is recommended, as further analysis of the hosted page content or associated payloads could reveal additional indicators of compromise or targeted brands.