startds-live[.]wixstudio[.]com

On 29 July 2026, analysts examined the domain startds-live.wixstudio.com, which is currently classified as an active generic phishing infrastructure with an elevated risk rating. The domain was created on 17 December 2016 and its registration was performed through the Wix Studio platform, indicating the use of a commercial website‑builder service for hosting. DNS resolution points to the public IPv4 address 34.144.206.118, a cloud‑hosting endpoint that is shared among multiple Wix‑hosted sites. No TLS certificate details are available, and HTTP response information has not been published, leaving the service’s transport security posture uncertain.

VirusTotal has processed the domain and 12 of 91 scanned security vendors have returned a malicious detection, confirming that at least a subset of scanning engines recognize phishing‑related activity associated with the host. The domain is also listed on one external security blocklist and is actively blocked by the PhishDestroy mitigation service, providing additional evidence that defensive platforms consider the host malicious. No other public reputation services, such as Google Safe Browsing, OTX, or additional blocklists, have been cited in the available intelligence. Because the site’s page title, content, and target brand have not been disclosed, the precise lure employed by the phishing campaign cannot be determined from the current data set.

Analysts should therefore treat any traffic to startds-live.wixstudio.com as suspicious, enforce URL filtering, and consider network‑level blocking. Continuous monitoring of the IP address 34.144.206.118 for new associations, as well as periodic re‑scanning on VirusTotal and other multi‑engine platforms, is recommended to capture any evolution in the payload or hosting configuration.