velodromee[.]wixstudio[.]com

On 29 July 2026, analysis identifies velodromee.wixstudio.com as an active generic phishing infrastructure. The domain was registered on 17 December 2016 via Wix Studio, a website‑building service, indicating the attacker leveraged a legitimate registrar to obtain a long‑standing domain. The site is listed on one public blocklist and is specifically blocked by PhishDestroy, confirming that at least one anti‑phishing feed has flagged it.

VirusTotal scans show 11 of 91 security vendors flagged the domain, evidencing a moderate detection rate across multiple scanners. No additional data on IP address, hosting ASN, geographic location, SSL certificate details, HTTP response codes, Safe Browsing status, OTX reports, or page title have been published, leaving the underlying hosting environment and content unverified. The presence on a blocklist, the registration date, and the multi‑vendor detections collectively suggest the domain is being used for malicious credential‑harvesting campaigns, consistent with the generic phishing classification.

Defenders should add velodromee.wixstudio.com to URL filtering and domain block lists, monitor outbound traffic for connections to the host, and consider sinkholing or null‑routing if possible. Continuous re‑scanning with VirusTotal and querying additional threat‑intel feeds are recommended to capture any changes in detection status or newly observed payloads. Organizations employing web‑proxy or secure web gateway solutions should ensure the domain is denied, and security teams should alert users to avoid any unsolicited communications referencing the domain.