pages-bridg-en[.]wixstudio[.]com

This domain, pages-bridg-en.wixstudio.com, was identified as a credential harvesting phishing site designed to steal login credentials through fraudulent login portals. The site mimics legitimate authentication pages to trick users into entering sensitive information such as usernames, passwords, and multi-factor authentication codes. Analysis indicates the domain was actively used in targeted phishing campaigns before being taken offline, posing a significant risk to individuals and organizations that may have interacted with it. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC and resolved to the IP address 34.144.206.118, hosted on Google Cloud infrastructure. The site was flagged by 5 out of 95 security vendors on VirusTotal, including detection as a phishing threat. Additional technical indicators include the use of Wix hosting, React framework, Google Cloud CDN, and a Let's Encrypt SSL certificate, which are commonly leveraged to lend an appearance of legitimacy to malicious sites. The domain appeared on one security blocklist and received a trust score of 0/100, further confirming its malicious nature. If you or your organization visited pages-bridg-en.wixstudio.com, immediate action is required to mitigate potential compromise. First, reset all passwords entered on the site, prioritizing accounts with elevated privileges or access to sensitive data. Enable multi-factor authentication on all critical accounts if not already active. Monitor financial transactions, email activity, and network logs for signs of unauthorized access or data exfiltration. Report the incident to your organization's security team or a qualified incident response provider for forensic analysis. If personal accounts were exposed, consider placing a fraud alert with credit bureaus and reviewing credit reports for suspicious activity.