nav-bridge-us[.]wixstudio[.]com

nav-bridge-us.wixstudio.com is a recently activated phishing site designed to impersonate a US banking or financial platform. The domain, hosted on Wix’s platform under wixstudio.com, leverages a legitimate subdomain structure to appear authentic while collecting login credentials entered by unsuspecting users. This campaign targets individuals seeking financial services or account access, tricking them into surrendering sensitive account details to attackers. Based on behavioral indicators and content deception, the threat type is classified as a credential harvesting phishing campaign, not just general phishing activity. This domain was flagged due to its active deceptive hosting and hosting infrastructure at IP 34.144.206.118, which resolves cleanly but is associated with Wix's cloud hosting environment often exploited in phishing operations. The SSL certificate issued by Let's Encrypt (valid and public) adds superficial legitimacy, masking the fraudulent intent. VirusTotal currently reports zero detections across 95 security engines as of the latest scan, indicating this threat has flown under the radar so far. The domain was launched recently under the wixstudio.com platform, a free web hosting provider commonly used to rapidly deploy spoofed portals. If you visited nav-bridge-us.wixstudio.com and entered any credentials, change your passwords immediately and enable multi-factor authentication on all related accounts. Review financial statements for unauthorized transactions and monitor accounts closely over the next 30 days. Report the event to your bank or financial provider and consider filing a complaint with the FTC or local cybercrime units if fraud occurs. Avoid clicking further links from this domain and warn others who may have accessed similar pages. This campaign is actively monitored; the domain status will be updated as new intelligence emerges.