ioapps-starts-tracon[.]wixstudio[.]com

Analysis as of July 22, 2026 indicates that the subdomain ioapps-starts-tracon.wixstudio.com is actively resolving to the IP address 162.159.143.12 and remains reachable. The domain is registered through Wix.com Ltd., a legitimate website‑building service, and its authoritative name server data could not be retrieved (NS_NOT_FOUND). VirusTotal records show that the domain has been scanned by 95 antivirus and URL‑reputation engines; none have raised a detection at the time of the scan, but the lack of alerts does not constitute assurance of benign intent.

The domain appears on a single security blocklist and is specifically listed as blocked by the PhishDestroy service, confirming that external threat‑intelligence feeds have flagged it as malicious. No public Safe Browsing, OTX, SSL certificate, HTTP status code, trust‑score, page‑title, or additional evidence links are presently available, leaving those aspects of the infrastructure unverified. The combination of active resolution, registration via a free‑hosting provider, presence on a blocklist, and classification as a generic phishing site suggests the infrastructure is being used to harvest credentials or otherwise deceive users.

Defenders should consider adding the domain and its resolving IP address to outbound‑filter deny lists, monitor DNS queries for the sub‑domain, and enforce strict user awareness training regarding unsolicited login requests. Continuous re‑scanning on multi‑vendor platforms and periodic verification of blocklist status are recommended to track any changes in the domain’s behavior or detection profile.