new-tanggem[.]wixstudio[.]com

Analysis conducted on July 29, 2026 identifies new-tanggem.wixstudio.com as an active credential-theft phishing domain hosted on Wix Studio infrastructure. The subdomain was registered through Wix Studio on December 17, 2016, though recent malicious activity suggests compromise or repurposing of existing hosting resources. Nameserver records point to dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net, consistent with legitimate Wix Studio deployments, indicating potential abuse of a trusted platform. The domain appears on one security blocklist and is actively blocked by PhishDestroy.

VirusTotal scans reveal detection by 10 of 91 security vendors, confirming malicious classification. No additional brand targeting, phishing kit, or specific scam category is identified in available intelligence, though the generic phishing classification suggests credential harvesting as the likely objective. Defenders should treat this domain as high-risk. Network-level blocking is recommended, particularly for enterprise environments where credential theft poses significant operational risk.

Given the use of Wix Studio, organizations may consider monitoring other subdomains under wixstudio.com for similar abuse patterns. No IP address, autonomous system, or country-level hosting details are provided in current intelligence, limiting attribution beyond the registrar. The exact content of the phishing page remains unanalyzed, though the elevated detection rate supports immediate mitigation measures.