ssocoinsquarcdn[.]wixstudio[.]com

Analysis conducted on July 21, 2026 indicates that the sub‑domain ssocoinsquarcdn.wixstudio.com is actively serving a phishing infrastructure. DNS resolution points to the IPv4 address 162.159.143.12. The host is provisioned through the Wix.com Ltd. platform, a legitimate website‑building service, which explains the presence of the “wixstudio.com” suffix. The domain is presently listed on one security blocklist and has been flagged by the PhishDestroy detection engine, confirming its malicious classification. The registrar information shows Wix.com Ltd. as the registering entity, and the domain’s nameserver data returned “NS_NOT_FOUND”, suggesting that standard authoritative name server records are unavailable or obscured. The available intelligence does not include a page title, SSL certificate details, HTTP response codes, or Safe Browsing verdicts, leaving the exact content of the landing page unverified. Consequently, the precise phishing lure (e.g., credential harvesting, account takeover) remains uncertain. However, the combination of active DNS resolution, blocklist presence, and a confirmed detection by PhishDestroy provides sufficient evidence to treat the domain as malicious. Defenders should immediately add ssocoinsquarcdn.wixstudio.com to network‑level deny lists and DNS‑based filtering policies. Continuous monitoring of the associated IP address 162.159.143.12 is advised, as the same host may be reused for additional malicious sub‑domains. Because the domain is hosted on a shared Wix infrastructure, any future sub‑domains created under the same registrar could inherit similar risk, so security teams should consider broader controls for Wix‑hosted assets. Until further forensic analysis of the page content is available, the recommendation is to block all traffic to the domain and to alert users of potential phishing attempts originating from this URL.