extension-appsio[.]wixstudio[.]com

Extension-appsio.wixstudio.com is currently listed as an active generic phishing infrastructure under investigation as of 20 July 2026. The domain is registered through Wix.com Ltd, a popular website‑building service, and its authoritative name server records could not be retrieved (NS_NOT_FOUND). DNS resolution returns a single IPv4 address, 34.144.206.118, which is the only observed host for this indicator. The address is associated with Wix's cloud hosting environment; no autonomous system or geographic data were disclosed. VirusTotal has processed the domain with 95 scanners and none reported a detection, but the absence of a finding does not constitute a safety assurance. The domain appears on one external blocklist and is actively blocked by the PhishDestroy feed, confirming that threat‑intelligence sources have flagged it as malicious. No SSL/TLS certificate information, HTTP status code, page title, or content snapshot has been published, leaving the exact phishing lure and targeted brand unknown. Consequently, analysts cannot confirm the specific victim‑facing page or credential‑capture mechanism. Defenders should immediately add extension‑appsio.wixstudio.com and its resolved IP 34.144.206.118 to network‑level deny lists, enforce outbound traffic inspection for connections to this host, and monitor DNS logs for any resolution attempts. Continuous re‑evaluation is advised, as future scans may reveal additional indicators such as malicious payloads, compromised credentials, or changes in hosting. Organizations employing Wix‑based services should be aware that compromised sub‑domains can be leveraged for phishing campaigns, and should validate any unexpected communications that reference this domain.