wixholdapps[.]wixstudio[.]com

The domain wixholdapps.wixstudio.com has been identified as a generic phishing site designed to impersonate Wix Studio, a legitimate website-building platform. Analysis indicates the domain was actively used for phishing operations, though it is currently offline. No specific phishing subtype (e.g., crypto drainer, credential harvesting) has been confirmed, but the infrastructure aligns with broad phishing campaigns targeting users of the Wix brand. Infrastructure analysis reveals the domain was registered on April 24, 2026, through GoDaddy.com, LLC, and resolved to the IP address 34.144.206.118. The SSL certificate was issued by Let's Encrypt (R12), a common choice for both legitimate and malicious domains. At the time of assessment, the domain was flagged by 4 of 95 security vendors on VirusTotal, and it appeared on one security blocklist. The page title, '404 Error: Page Not Found | Wix Studio,' suggests an attempt to mimic Wix Studio’s branding, though the error page may indicate recent takedown efforts or operational disruptions. Current status confirms the domain is offline, reducing immediate risk to end users. However, the infrastructure remains a potential threat if reactivated. Organizations and individuals are advised to monitor for re-emergence, block the domain and associated IP (34.144.206.118) at the network level, and educate users on recognizing phishing attempts targeting Wix or similar platforms. Security teams should review logs for prior connections to this domain or IP to assess potential exposure.