home-naxocdn[.]wixstudio[.]com

On July 21, 2026, the domain home-naxocdn.wixstudio.com was identified as part of an active generic phishing campaign. The domain is registered through Wix.com Ltd., a well‑known website‑building service, and its authoritative nameservers could not be resolved (NS_NOT_FOUND). Network analysis shows that the domain resolves to the IP address 162.159.143.12, which is associated with the Wix hosting infrastructure. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, indicating that at least one defensive feed has recognized malicious use. VirusTotal reports that the domain was scanned by 95 antivirus and URL‑reputation vendors, with none flagging it as malicious; this absence of detections should not be interpreted as a safety guarantee, as the domain’s classification as phishing is derived from blocklist inclusion and observed activity. No public safe‑browsing, OTX, or other threat‑intel entries are currently associated with the domain, and there is no available page title or SSL certificate information to further characterize the site. Defenders should continue to monitor traffic to 162.159.143.12 for signs of credential harvesting, enforce URL filtering based on the known blocklist entry, and consider adding the domain to internal deny lists. Given the active status and the lack of comprehensive detection coverage, precautionary blocking is recommended until additional evidence clarifies the threat’s scope.