nowledger[.]wixstudio[.]com

The domain nowledger.wixstudio.com was created on 17 December 2016 and is registered through the Wix Studio platform. Infrastructure analysis shows that the zone is served by four NSOne name servers: dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net. The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy, indicating that at least one anti‑phishing service has identified malicious activity associated with it.

VirusTotal records reveal that five out of ninety‑one scanned security vendors have flagged the domain, providing independent confirmation of its suspicious nature. The threat type is classified as a crypto drainer, and the risk level is elevated while the operational status remains active. No additional public indicators such as IP address, SSL certificate details, HTTP response codes, or page title information have been disclosed, leaving the full scope of the hosting environment and content unknown.

Given the age of the domain, its presence on a blocklist, the multi‑vendor detections, and its association with a crypto‑draining campaign, defenders should consider adding nowledger.wixstudio.com to deny‑list rules, monitoring DNS queries for the listed NSOne name servers, and applying network‑level filtering to prevent outbound connections to any resolved addresses. Continuous re‑evaluation is advised as further telemetry becomes available.