advance-suiteapp[.]wixstudio[.]com

The domain advance-suiteapp.wixstudio.com is currently active and has been classified as a generic phishing site under investigation. Infrastructure analysis shows that the hostname resolves to the IP address 162.159.143.12, which belongs to a major content delivery network, indicating the use of a widely available hosting service to obscure the source of the malicious activity. A DNS query for authoritative name servers returned NS_NOT_FOUND, suggesting that the domain’s nameserver records are either hidden or not publicly resolvable, a technique commonly employed to impede attribution.

Registration data identifies Wix.com Ltd. as the registrar, meaning the subdomain was likely created through Wix’s website‑builder platform, a service that provides free subdomains to users and is sometimes abused by threat actors. The domain has been blocked by the PhishDestroy feed and appears on a single external security blocklist, providing independent confirmation of its malicious reputation. VirusTotal scanned the domain with 91 antivirus and URL‑reputation engines; none reported a detection, yet the lack of a positive match does not exonerate the domain, as many phishing sites evade static analysis.

No additional intelligence such as page title, SSL certificate details, or HTTP response codes is presently available, leaving the exact content and targeted brand undefined. Defenders should prioritize adding advance-suiteapp.wixstudio.com to outbound filtering rules, monitor DNS queries for the associated IP, and consider broader blocklist updates to capture related subdomains created under the same registrar. Continuous re‑evaluation is advised as further investigative data, such as payload samples or victim reports, become available.