apps-paybescdn[.]wixstudio[.]com

The domain apps-paybescdn.wixstudio.com was registered through Wix Studio and first observed on 17 December 2016. Its authoritative name servers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net, indicating reliance on the NSONE hosting platform. Current intelligence assigns the domain to the generic phishing threat category with an elevated risk rating and marks it as active. The domain is listed on one external security blocklist and is explicitly blocked by the PhishDestroy feed, confirming that at least one reputable anti‑phishing service has taken mitigation action.

VirusTotal analysis shows 12 of 91 scanned security vendors flag the domain as malicious, providing independent corroboration of its malicious intent. No additional public reputation services, Safe Browsing checks, or Open Threat Exchange (OTX) entries are present in the available data, leaving the broader detection landscape partially unverified. The lack of disclosed IP address, SSL certificate details, HTTP response codes, or page title prevents a deeper technical fingerprint of the hosting environment or content. Consequently, analysts cannot confirm whether the site hosts credential‑harvesting forms, redirects, or other payloads, and the exact phishing lure remains uncharacterized.

Defenders should continue to block the domain at network perimeter and DNS layers, update detection signatures to include the identified nameserver set, and monitor for any new sightings in threat‑intel feeds. Incident response teams encountering traffic to this domain should treat any associated activity as potentially credential‑stealing and isolate affected endpoints. Ongoing collection of URL‑level samples and sandbox execution would be required to elucidate the specific phishing vector.