project-bridge[.]wixstudio[.]com

PhishDestroy identifies project-bridge.wixstudio.com as an active generic phishing site impersonating a legitimate Wix Studio builder page to harvest user credentials and deliver malicious attachments. The domain leverages Wix’s free subdomain hosting (wixstudio.com) to appear legitimate while hosting fraudulent content designed to trick users into entering sensitive information under the guise of an online project management tool. Security researchers note this tactic mirrors recent campaigns targeting small-business operators who rely on trusted website builders for their operations. This domain was flagged by PhishDestroy due to confirmed malicious activity, with indicators including a VirusTotal detection score of 4 out of 95 scanners as of the latest analysis, indicating a newly deployed threat still evading most antivirus engines. The domain resolves to IP address 34.144.206.118, which is associated with cloud hosting services commonly abused by threat actors for low-cost phishing operations. While the SSL certificate is issued by Let's Encrypt—exploited in many phishing campaigns to build false trust—the site remains unlisted on major blocklists, suggesting recent activation and a need for immediate community awareness. Users who visited project-bridge.wixstudio.com should immediately cease any interaction with the site and avoid entering login credentials or downloading files. Clear browser cache and cookies related to the domain, then run a full system scan using updated antivirus software due to the risk of secondary malware infections. Report this domain to your organization’s security team or through platforms like PhishDestroy to help block future access. Organizations should consider implementing DNS filtering rules targeting the IP address 34.144.206.118 and the domain itself to prevent employee exposure.