en-us-download[.]wixstudio[.]com

PhishDestroy identifies en-us-download.wixstudio.com as a domain engineered for credential theft, specifically targeting Wix Studio users. The domain's name and structure mimic a legitimate download subpage, aiming to trick visitors into entering sensitive information. Although currently offline, the threat remains significant due to its low detection rate and potential for reactivation.

VirusTotal analysis shows zero detections out of 95 security vendors, indicating that this domain has not been widely recognized as malicious. The domain was created on March 30, 2026, through GoDaddy.com, LLC, and resolves to IP address 34.144.206.118. It appears on one security blocklist, suggesting limited but existing awareness among threat intelligence sources. The page title displayed a 404 error, which may have been a fallback after the domain was taken offline, or part of the lure to appear legitimate.

Any user who visited en-us-download.wixstudio.com should immediately change their Wix Studio account credentials and enable two-factor authentication. It is also advisable to scan the device for any malware or unwanted software, as credential theft pages may also distribute payloads. Monitoring account activity for suspicious logins and reporting the domain to relevant cybersecurity authorities will help mitigate further risk.