support-htx-cdm[.]wixstudio[.]com

The domain support-htx-cdm.wixstudio.com is registered via Wix Studio and was created on 17 December 2016. Its authoritative name servers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net. VirusTotal analysis shows that five of ninety‑one antivirus or URL‑reputation engines have classified the domain as malicious, indicating a non‑trivial detection rate across independent scanners. The domain also appears on a public security blocklist and is actively blocked by the PhishDestroy service, reinforcing the view that it is being used for phishing‑related activity.

No public HTTP response, SSL certificate, or page‑title information is currently available in the intelligence feed, so the exact landing page content and any brand impersonation cannot be confirmed at this time. Similarly, there are no disclosed IP address, autonomous system, or geographic location details, limiting a deeper hosting analysis. The lack of additional context means that the full scope of the campaign—such as targeted victims, credential‑harvesting mechanisms, or secondary infrastructure—remains uncertain. Given the available evidence, defenders should treat the domain as hostile.

Recommended actions include adding the domain to network and endpoint blocklists, configuring web proxies to deny outbound connections, and monitoring DNS queries for any resolution attempts. Organizations that employ threat‑intelligence platforms should ingest the VirusTotal detection count and the blocklist entry to maintain up‑to‑date protection. Continuous re‑evaluation is advised, as further analysis (e.g., HTTP status or page‑title collection) may reveal additional malicious behavior.