home-chagelly[.]wixstudio[.]com

PhishDestroy identifies home-chagelly.wixstudio.com as an active generic phishing domain currently under investigation. This subdomain, hosted on WixStudio, masquerades as a legitimate homepage to deceive users into divulging sensitive information. The threat type is classified as generic_phishing, indicating a broad but targeted campaign likely leveraging social engineering tactics to exploit user trust. No specific brand impersonation or drainer kit associations have been confirmed at this stage, but the use of a legitimate hosting platform (WixStudio) suggests an attempt to bypass traditional security filters. The domain's SSL certificate, issued by Let's Encrypt, adds a false sense of legitimacy, further emphasizing the need for cautious scrutiny. Seed: a8cc79.

This domain resolves to the IP address 34.144.206.118 and currently exhibits a VirusTotal detection score of 4/95, indicating it has not yet been flagged by security vendors. The registrar remains unverified in public databases, and further analysis is required to determine its creation date and precise hosting infrastructure. Google Safe Browsing (GSB) has not yet flagged this domain, and the blocklist count is pending additional threat intelligence. The lack of detections, despite the domain's active status, suggests a potentially emerging or rapidly evolving threat that has not yet been widely recognized. Given the absence of immediate detections, users and organizations are advised to treat this domain with heightened suspicion. Seed: a8cc79.

The current status of home-chagelly.wixstudio.com is active, with the threat classified as under_investigation. PhishDestroy recommends immediate caution, as the domain's legitimate hosting platform and unflagged status could enable widespread deception. Users encountering this domain should avoid interaction and report it to their security teams or platforms like PhishDestroy for further analysis. While the risk level is currently under_investigation, the potential for harm remains significant due to the domain's deceptive design and unassessed threat vector. Security researchers are encouraged to monitor this domain closely, and affected users should run full system scans to mitigate any potential compromise. Seed: a8cc79.