logon-appndaxapp[.]wixstudio[.]com

This domain, logon-appndaxapp.wixstudio.com, was registered on June 08, 2026 through the Wix Studio platform. DNS resolution points to the IPv4 address 34.144.206.118, which is the sole host observed for this indicator. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service. VirusTotal analysis shows that 12 of 91 scanned security vendors have flagged the domain as malicious, indicating a moderate level of consensus among detection engines.

No additional public threat‑intel sources such as OTX or Google Safe Browsing entries were reported in the current dataset. The registrar information does not reveal any obfuscation; the domain is tied directly to the Wix Studio service, suggesting that the attacker leveraged a legitimate hosting provider to obtain a sub‑domain. Infrastructure analysis therefore points to a low‑complexity deployment that relies on a publicly reachable IP address without evidence of content delivery networks or proxy layers.

The limited blocklist presence and the relatively small number of vendor detections imply that the phishing campaign is in an early or low‑volume stage, but the elevated risk rating reflects the potential for credential harvesting. Defenders should incorporate the domain and its IP address into existing URL filtering and host‑based denial lists, monitor outbound traffic for connections to 34.144.206.118, and enforce multi‑factor authentication for any services that could be targeted. Continuous re‑scanning on VirusTotal and periodic checks of the Wix Studio sub‑domain space are recommended to capture any rapid changes in the threat posture.