applacecdn[.]wixstudio[.]com

Analysis as of July 24, 2026 indicates that the domain applacecdn.wixstudio.com is actively being used for a generic phishing operation. The domain is registered through Wix.com Ltd., a legitimate website‑building service, which does not inherently mitigate malicious use of its sub‑domains. DNS resolution points to the address 162.159.143.12, an IP known to host other Wix‑related content, but the presence of malicious activity cannot be excluded solely on that basis. The domain lacks publicly resolvable name server records (NS_NOT_FOUND), a condition that frequently accompanies fast‑flux or dynamically generated hosting, and may hinder straightforward attribution.

Detection vendors have flagged the domain; it is currently listed on one external security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, confirming that at least one downstream protection platform has identified it as malicious. The blocklist entry, however, does not disclose the underlying payload or the specific brands being spoofed, and no page title or content analysis is available in the present intelligence set. Consequently, the exact appearance of the phishing page, the credential‑capture mechanisms employed, and the targeted victim demographic remain unknown. Defenders should prioritize immediate containment by adding applacecdn.wixstudio.com to URL filtering rules and, where possible, blocking outbound connections to 162.159.143.12.

Continuous monitoring of DNS queries for this domain and periodic re‑evaluation of its status on additional reputation services are advised, as the infrastructure could be repurposed or expanded. Organizations employing web‑gateway solutions should ensure that any heuristic or reputation‑based detection is tuned to capture this domain despite the lack of a fully populated WHOIS or SSL profile.