getting-starts[.]wixstudio[.]com

PhishDestroy has identified getting-starts.wixstudio.com as a generic phishing domain, though no specific brand or drainer kit was linked to this campaign. The domain was created on April 17, 2026, and was registered through GoDaddy.com, LLC. Its SSL certificate was issued by Let's Encrypt (R12), and it resolved to IP address 34.144.206.118. Despite being flagged by only 1 out of 95 security vendors on VirusTotal, the domain appeared on one security blocklist and was found to be serving a generic phishing page before being taken offline.

From a technical standpoint, the domain's low detection rate on VirusTotal (1/95) suggests that it may have evaded many security tools during its active period. The registration via GoDaddy and the use of a Let's Encrypt certificate are common among phishing sites. The domain's IP address, 34.144.206.118, is associated with Google Cloud, which could indicate that the site was hosted on a compromised or misused cloud instance. The page title returned a 404 error, meaning the phishing content was removed or the site was already deactivated by the time of analysis.

Currently, getting-starts.wixstudio.com is offline, and the threat has been contained. However, the low VT detection rate and the generic nature of the phishing attempt mean that similar domains could still pose a risk. Users should remain cautious of unsolicited links and verify the legitimacy of any website before entering credentials. PhishDestroy recommends blocking this domain at the network level and monitoring for related domains using the same registration or hosting patterns. If any credentials were inadvertently entered, they should be changed immediately and accounts monitored for suspicious activity.