bincane-cd[.]wixstudio[.]com

The domain bincane-cd.wixstudio.com has been identified as a phishing infrastructure component specifically designed to impersonate legitimate Wix Studio administrative portals. Analysis confirms this as a credential harvesting operation targeting users of the Wix platform, with the domain currently marked as offline following detection. The threat type aligns with generic phishing but exhibits characteristics of targeted service impersonation through its subdomain structure and hosting pattern. Infrastructure analysis reveals multiple technical indicators of malicious activity. The domain resolves to IP address 34.144.206.118, hosted on Google Cloud infrastructure with HTTP/3 and Google Cloud CDN technologies detected. Registered through GoDaddy.com, LLC on April 27, 2026, the domain appears on one security blocklist while maintaining a Gridinsoft trust score of 0/100. VirusTotal detection metrics show 16 of 95 security vendors flagging the domain as malicious, with PhishDestroy implementing active blocking measures. The SSL certificate is issued by Let's Encrypt, providing HTTPS encryption that enhances the appearance of legitimacy while facilitating phishing operations. Current status indicates the domain has been taken offline, though historical infrastructure patterns suggest potential for reactivation or migration to alternative hosting. Organizations should implement immediate protective measures including DNS-based blocking of the domain and associated IP address 34.144.206.118 at perimeter security controls. Security teams are advised to monitor for similar subdomain patterns (particularly *-cd.wixstudio.com variations) and implement enhanced authentication requirements for Wix administrative access. End users should be trained to verify domain authenticity before entering credentials, particularly for service management portals, and report any suspicious login prompts to security operations centers.