connect-suitecdn[.]wixstudio[.]com

Analysis of the domain connect-suitecdn.wixstudio.com, observed on July 24 2026, identifies it as part of a generic phishing infrastructure currently listed as active. The domain is registered through Wix.com Ltd., a legitimate website‑builder service, but the registration details do not disclose a specific registrant name or contact information. DNS resolution points to the IP address 162.159.143.12, which is common to Wix’s content‑delivery network and does not, by itself, indicate malicious intent. However, the domain fails to resolve its authoritative name servers, as the nameserver query returns NS_NOT_FOUND, a pattern frequently associated with fast‑flux or deliberately obscured hosting. The domain has been submitted to VirusTotal and examined by 91 antivirus and URL‑reputation vendors; none of the scanners have raised a detection at the time of analysis.

This absence of detections should not be interpreted as a validation of safety, because the sample may not have been actively probed or the payload may be delivered only after specific user interaction. Independent threat‑intelligence feeds have placed the domain on a single security blocklist, and the commercial phishing mitigation service PhishDestroy has confirmed it as blocked, reinforcing the suspicion of phishing use. Given the limited public information, several uncertainties remain. The specific phishing kit, targeted brand, and page content have not been disclosed, and no SSL certificate details, HTTP status codes, or page‑title metadata are available. Consequently, the exact lure and victim profile cannot be determined from the current dataset.

Defenders should treat connect‑suitecdn.wixstudio.com as a malicious indicator. Network‑level controls ought to block traffic to the resolved IP address and to the domain itself, especially from browsers or email clients that may follow links.