ndaxcdn[.]wixstudio[.]com

The domain ndaxcdn.wixstudio.com is currently active and has been identified as a generic phishing infrastructure. Evidence shows that the domain resolves to the IPv4 address 34.144.206.118 and is hosted by a service associated with Wix.com Ltd., the registrar listed for the registration. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy filtering service, indicating that at least one commercial anti‑phishing vendor has flagged the host as malicious. No authoritative nameserver records were returned during DNS queries, which may suggest a misconfiguration or an attempt to obscure the domain’s resolution path. The lack of publicly available page titles, SSL certificate details, HTTP response codes, or Safe Browsing verdicts means that the content served by the site has not yet been indexed by common reconnaissance tools, leaving the exact impersonated brand or credential‑collection technique uncertain. Nonetheless, the combination of a Wix‑based registration, a dedicated IP address, and inclusion on a blocklist provides sufficient confidence for defenders to treat the domain as hostile. Network defenders should update firewall and proxy rules to deny outbound connections to 34.144.206.118, add ndaxcdn.wixstudio.com to local blocklists, and monitor DNS logs for any resolution attempts. Incident response teams should also consider harvesting additional telemetry, such as HTTP headers and page content, if the site is accessed, to confirm the phishing vector and to aid in attribution. Continuous monitoring of the domain’s status with threat‑intel feeds is recommended, as the current classification is under investigation and future activity may expand the observed indicators.