work-started[.]wixstudio[.]com

Analysis of work-started.wixstudio.com shows that the domain is actively used for malicious activity and is currently classified as a generic phishing infrastructure. The domain was registered through Wix Studio on December 17, 2016, indicating a long‑standing registration that predates many modern phishing campaigns. It has been blocked by the PhishDestroy service and appears on one external security blocklist, confirming that at least one reputable anti‑phishing feed has identified it as hostile.

VirusTotal scans reveal that 15 of 91 security vendors flag the domain as malicious, providing independent corroboration of its risk profile. No public information is available regarding the hosting provider, IP address, SSL certificate details, or the exact page content served by the site; these aspects remain unverified in the current intelligence set. Defenders should treat the domain as high‑risk and add it to URL filtering and DNS block policies across enterprise environments.

Continuous monitoring of any changes in detection counts or additional blocklist listings is advised, as further evidence may emerge that clarifies the scope of the phishing campaign. In the absence of detailed hosting data, network‑level controls and endpoint URL reputation checks constitute the primary mitigation controls for this threat.