ext-appsuite.wixstudio.com: Confirmed Phishing Site

The domain ext-appsuite.wixstudio.com is currently active and resolves to the IPv4 address 162.159.143.12. Registration information shows it was created through Wix.com Ltd., a provider that offers sub‑domain hosting services, which are frequently abused for malicious campaigns. The domain has been listed on a single security blocklist and is actively blocked by the PhishDestroy detection platform, indicating that at least one anti‑phishing vendor has identified it as malicious. Nameserver queries returned NS_NOT_FOUND, suggesting that the authoritative name servers could not be resolved or are intentionally hidden, a tactic sometimes employed to impede automated analysis.

No additional intelligence such as SSL certificate details, page title, or content snapshots is available, leaving the precise phishing lure or targeted brand undisclosed. Consequently, defenders lack visibility into the exact payload or credential‑harvesting mechanisms used. Given the confirmed detection by PhishDestroy and the presence on a blocklist, security teams should immediately add ext-appsuite.wixstudio.com to URL filtering and DNS‑based deny lists.

Network traffic to the resolved IP 162.159.143.12 should be monitored and, where feasible, blocked at perimeter devices. Continuous re‑evaluation is advised, as further evidence may emerge from additional scanning services or threat‑intel feeds. Organizations should also audit email gateways for messages containing this domain and enforce multi‑factor authentication to mitigate potential credential compromise.