myssoheildappcdn[.]wixstudio[.]com

myssoheildappcdn.wixstudio.com was first observed on June 08 2026 when the domain was registered through the Wix Studio platform. Within weeks the domain appeared on a security blocklist and was subsequently added to the PhishDestroy blocklist, indicating active use in phishing campaigns. VirusTotal scans show that 14 of 91 security vendors have flagged the domain as malicious, suggesting that multiple detection engines have identified suspicious behavior associated with the host. The domain’s infrastructure is hosted on Wix’s CDN service, which provides shared IP space for many legitimate sites, making IP‑based reputation less discriminating.

No public WHOIS details beyond the registrar are available, and the domain does not currently carry a recognized SSL certificate chain beyond the default Wix‑issued TLS, which does not provide additional trust signals. The page title and content have not been publicly disclosed, so the exact phishing lure (e.g., credential harvesting for a specific service) remains unknown. However, the combination of recent registration, blocklist inclusion, and multi‑vendor detections points to an elevated risk profile.

Defenders should add myssoheildappcdn.wixstudio.com to URL filtering rules, monitor DNS queries for this FQDN, and consider blocking traffic to the associated IP ranges used by Wix’s CDN when feasible. Security teams should also correlate any authentication attempts or credential submissions that reference the domain with known phishing incident response procedures. Continuous re‑evaluation is recommended, as additional intelligence such as page content or victim reports may emerge.