support-htxx-cd[.]wixstudio[.]com

The domain support-htxx-cd.wixstudio.com was created on December 17, 2016 and is hosted on the IP address 34.144.206.118. Registration records show the domain was provisioned through the Wix Studio platform, a legitimate website‑builder service that is sometimes abused for malicious hosting. The domain appears on a single external blocklist and is listed as blocked by the PhishDestroy service, indicating that at least one security organization has identified it as malicious. VirusTotal scans have returned 13 positive detections out of 91 scanned engines, confirming that multiple anti‑malware vendors have flagged the domain for malicious behavior.

No additional public reputation services such as Safe Browsing, OTX, or SSL/TLS analysis have been supplied, and the page title has not been disclosed, leaving the exact content of the site unknown. The risk rating is elevated and the status is active, suggesting the infrastructure remains operational. Defenders should add 34.144.206.118 to network‑level deny lists and enforce DNS filtering for the fully qualified domain name.

Continuous monitoring of outbound connections to this host is advised, and any authentication attempts that resolve to this domain should be blocked or redirected to a corporate warning page. Because the underlying payload or lure has not been publicly observed, threat hunters should treat any traffic to the domain as potentially credential‑stealing and correlate it with user‑agent strings, referrer headers, and endpoint logs to identify compromised accounts. Organizations using Wix‑based web services should review their own SaaS usage policies to ensure that sub‑domains are not inadvertently permitted for external communication.