bitgat-lgn[.]wixstudio[.]com

Analysis indicates that the domain bitgat-lgn.wixstudio.com was registered on June 08, 2026 through the Wix Studio platform. The domain resolves to the IPv4 address 34.144.206.118, which is typical of shared hosting environments used by website‑builder services. VirusTotal has recorded 14 positive detections out of 91 scanned security vendors, confirming that multiple reputable scanners flag the site as malicious. The domain is currently listed on a single security blocklist and has been explicitly blocked by the PhishDestroy filtering service, reinforcing the consensus that the site is being used for phishing activity. The threat classification is identified as generic phishing and the risk rating is elevated, with the operational status marked as active as of the report date, July 29, 2026.

Available intelligence does not include SSL certificate details, HTTP response codes, page title, or any associated brand identifiers, leaving the exact content of the landing page unverified. Likewise, there is no publicly disclosed information on autonomous system number, geographic location of the hosting provider, or corroborating reports from other threat‑intelligence platforms. The limited data set therefore constrains the ability to attribute the campaign to a specific actor or to assess the scope of the phishing infrastructure beyond the observed domain and IP address.

Defenders should continue to deny network communications to the resolved IP address and enforce blocklist entries for the domain across perimeter and endpoint controls. Security teams are advised to monitor for related C2 infrastructure by querying the IP 34.144.206.118 for new hostnames, and to incorporate the domain into email‑gateway and web‑proxy block policies. Given the active status and elevated risk, any attempted credential submission to URLs under this domain should be treated as compromise attempts and logged for incident response.