get-bridge[.]wixstudio[.]com

Analysis as of July 24, 2026 shows that get-bridge.wixstudio.com was registered through GoDaddy.com, LLC on March 22, 2026 and configured with four NS1 name servers (dns1.p08.nsone.net through dns4.p08.nsone.net). The domain resolves to the Google Cloud address 34.144.206.118, which is hosted in the United States. TLS is provided by a Let’s Encrypt certificate, and the web stack reports Wix, React, Google Cloud CDN and HTTP/3. The only publicly observed page returns HTTP 404 with the title “404 Error: Page Not Found | Wix Studio”. VirusTotal records three positive detections out of ninety‑four scanners, confirming that at least a small subset of security products consider the domain malicious.

It is listed on a single active blocklist and has been actively blocked by the PhishDestroy service. The intelligence classifies the activity as a “Crypto Scam”, although the exact content of the alleged campaign has not been captured. Current status is offline, indicating that the site is no longer serving content, but the infrastructure artifacts remain observable. Uncertainty remains regarding the specific phishing payload or cryptocurrency addresses that may have been used, because no landing page was retrieved before the site was taken down. Consequently, attribution to a particular campaign or actor cannot be confirmed at this time.

Defenders should continue to enforce blocklist rules for the domain and its associated IP address, monitor the NS1 name servers for any re‑activation, and consider adding the host to internal URL filtering policies. Because the domain uses a legitimate TLS certificate issued by Let’s Encrypt, transport‑layer inspection should not rely solely on certificate trust. Continuous scanning with multi‑engine services is recommended to capture any future changes in detection scores.