mycryptocdn[.]wixstudio[.]com

Analysis on July 25, 2026 identifies the domain mycryptocdn.wixstudio.com as an offline generic phishing site. The domain was registered through GoDaddy.com, LLC on April 20 2026 and resolves to the Google Cloud IP address 34.144.206.118, located in the United States. DNS resolution uses the nsone.net name server cluster (dns1.p08.nsone.net through dns4.p08.nsone.net). An HTTPS endpoint is present with a Let’s Encrypt R12 certificate, indicating a valid TLS handshake despite the site being taken offline. The web server reports a 404 HTTP status and the page title returned is “404 Error: Page Not Found | Wix Studio”, confirming that the original content is no longer accessible.

Technology fingerprints show the site was built on Wix and employs React, Google Cloud services, Google Cloud CDN, and HTTP/3. Threat intelligence shows the domain appears on a single security blocklist and has been actively blocked by PhishDestroy. VirusTotal analysis recorded four positive detections out of ninety‑four scanners, reinforcing the malicious classification. No additional public threat feeds such as OTX or Safe Browsing entries are referenced in the available data. The evidence confirms that the domain was used for a generic phishing operation before being taken offline.

However, the precise phishing campaign details, target brand, and payload are not disclosed in the current dataset, leaving those aspects uncertain. Defenders should continue to monitor the IP address 34.144.206.118 for any re‑hosting activity, enforce blocklist updates that include this domain, and ensure that any outbound connections to the associated name servers are scrutinized. Organizations using Wix or Google Cloud services should verify that no legitimate assets share the same infrastructure to avoid false positives. Ongoing surveillance of the registrar GoDaddy for new domains using similar naming patterns is also recommended.