ndaxiolog[.]wixstudio[.]com

This investigation report details the domain ndaxiolog.wixstudio.com, currently classified as a generic phishing page. As of July 20, 2026, the domain remains active and is hosted on infrastructure managed by Wix.com Ltd. The domain resolves to the IP address 34.144.206.118, though no nameservers were identified during analysis, which may indicate an incomplete or misconfigured DNS setup. The domain appears on one security blocklist, suggesting initial detection by at least one vendor, though the specific nature of the threat has not been widely corroborated. Analysis indicates the domain was registered through Wix’s platform, which is commonly used for both legitimate and malicious purposes due to its ease of deployment. The absence of nameserver records may reflect an attempt to evade detection or could result from a temporary misconfiguration. The IP address 34.144.206.118 is associated with cloud-based hosting, which is frequently leveraged by threat actors to rapidly deploy and rotate phishing infrastructure. No vendor detections were recorded at the time of the most recent VirusTotal scan, though the domain was evaluated by 95 security engines. The lack of detections does not confirm the domain’s safety, particularly given its presence on a security blocklist and its unresolved nameserver status. Defenders should treat this domain as potentially malicious until further evidence emerges. Organizations are advised to monitor network traffic for connections to this domain, assess its relevance to their threat model, and consider blocking it at the perimeter if no legitimate use case is identified. Additional analysis, including behavioral and content-based evaluation, is recommended to determine the exact nature of the phishing activity.