nav-ettrio[.]wixstudio[.]com

This domain is flagged for hosting a generic phishing infrastructure designed to harvest user credentials through fake login portals. Analysis indicates the site operated as a credential harvester, likely impersonating legitimate services to trick users into submitting sensitive authentication details. The elevated risk level is assigned due to the domain's recent activity, technical configuration, and detection by multiple security mechanisms despite its current offline status.

Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC and resolved to IP address 34.144.206.118. The SSL certificate was issued by Let's Encrypt, a common choice for both legitimate and malicious sites. VirusTotal detections show 7 out of 95 security vendors flagged the domain, while it appears on three security blocklists: PhishDestroy, PhishingArmy, and OISD. The domain was created on June 12, 2026, with a Gridinsoft trust score of 0/100. Technologies detected include Wix, React, Google Cloud, Lodash, HSTS, Google Cloud CDN, and HTTP/3, suggesting a modern, cloud-based phishing framework. The page title, '404 Error: Page Not Found | Wix Studio,' indicates the site may have been taken down or reconfigured post-compromise.

Mitigation steps for organizations and users include blocking the domain and its resolving IP at the network perimeter. Security teams should monitor for indicators of credential harvesting, such as unexpected login prompts or redirects to unfamiliar domains. Endpoint protection should be configured to flag or block access to newly registered domains with low trust scores, particularly those using cloud hosting services. Users should be trained to verify domain authenticity before entering credentials, especially on sites hosted on free or low-cost platforms. Logs should be reviewed for any prior connections to this domain or its IP to assess potential exposure.