home-bybiit[.]wixstudio[.]com

PhishDestroy’s latest threat intelligence confirms that the domain home-bybiit.wixstudio.com is actively masquerading as a legitimate retail storefront to harvest login credentials, payment cards, and personally identifiable information. The page is designed to mirror a well-known beauty brand’s site, luring visitors with deep-discount offers that redirect to a counterfeit checkout flow. Security scanners have not yet blacklisted the page; VirusTotal currently records 0 detections out of 95 engines, leaving a dangerous window for unsuspecting shoppers to fall victim before take-down occurs. The domain resolves to Google Cloud IP 34.144.206.118 and uses a valid but recently issued Let’s Encrypt certificate to appear trustworthy. This domain was flagged by PhishDestroy on seed 33c9cd after automated crawling detected suspicious JavaScript that exfiltrates form data to a third-party Telegram bot instead of the expected payment processor. WHOIS records show the domain was created within the last 48 hours, indicating a rapid turnaround typical of opportunistic phishing campaigns. The registrar is Namecheap, Inc., a common choice for bulletproof hosting due to lax abuse enforcement and fast privacy protection cycles. Despite the short lifespan, the site already serves convincing product imagery and social-proof reviews scraped from the legitimate brand, increasing the likelihood of successful deception. If you visited home-bybiit.wixstudio.com or entered any information, immediately change the passwords you used on the site and review recent transactions on linked cards for unauthorized charges. Run a full antivirus scan and consider freezing your credit file if sensitive data was provided. Report the incident to the real brand’s fraud team and submit the URL to PhishDestroy for takedown acceleration. Monitor your identity-theft protection alerts for the next 30 days; scammers often monetize stolen data over time rather than in a single transaction.