nav-ndxcd[.]wixstudio[.]com

The domain nav-ndxcd.wixstudio.com is flagged as a generic phishing site with an elevated risk rating and remains active as of the report date, July 29, 2026. VirusTotal analysis shows that 5 of 91 security vendors have flagged the domain, indicating a modest but notable detection rate. It appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, providing an additional layer of protection for networks that subscribe to that feed. Registration information reveals that the domain was created on June 08, 2026 through the Wix Studio platform, a legitimate website‑builder service that often supplies subdomains and hosting to end users.

No further infrastructure details such as IP address, ASN, SSL certificate, or HTTP response data are present in the current intelligence set, leaving the hosting environment and any potential payload delivery mechanisms uncharacterized. Consequently, the full scope of the threat infrastructure cannot be fully assessed at this stage. Defenders should ensure that the domain is included in internal deny lists and that existing blocklist subscriptions, including PhishDestroy, are kept up to date. Network monitoring tools should generate alerts for any outbound connections to this domain, and security appliances should enforce the blocklist entry.

Threat‑hunting activities may benefit from correlating this domain with other recently created Wix Studio subdomains, similar registration timestamps, or related URL patterns observed in network logs. Organizations that rely on Wix‑hosted services should treat newly created Wix subdomains with heightened scrutiny, applying additional verification steps before allowing user interaction. Continuous collection of passive DNS, SSL certificate, and page content data is recommended to enrich detection capabilities and to refine mitigation actions as more evidence becomes available.