newmholdapps[.]wixstudio[.]com

The domain newmholdapps.wixstudio.com is presently classified as an active generic phishing infrastructure and assigned an elevated risk level. Registration data shows the domain was created on December 17, 2016 through the Wix Studio service, indicating a long‑standing registration that predates the observed malicious activity. Threat intelligence from PhishDestroy confirms the domain is blocked by that service, and it also appears on a public security blocklist, providing independent corroboration of its malicious status.

VirusTotal scans have resulted in 11 of 91 security vendors flagging the domain, reinforcing the suspicion that it hosts or distributes phishing content. No additional public indicators such as IP address, hosting provider, SSL certificate details, HTTP response codes, Safe Browsing verdicts, or page title have been disclosed in the current intelligence set, leaving those aspects of the infrastructure unverified. Defenders should prioritize immediate containment by adding newmholdapps.wixstudio.com to network and endpoint blocklists, and enforce URL filtering rules that deny traffic to the domain.

Continuous monitoring for any changes in hosting, certificate issuance, or additional vendor detections is advised, as further evidence may emerge that clarifies the scope of the phishing campaign. Organizations should also review any recent user reports that reference Wix‑hosted domains, since the registration pathway suggests the attacker may be leveraging legitimate web‑hosting platforms to obscure the origin of malicious pages.