homepage-global[.]wixstudio[.]com

This domain, homepage-global.wixstudio.com, is identified as a high-risk phishing infrastructure impersonating Wix Studio. Analysis indicates the site was designed to harvest user credentials under the guise of a legitimate Wix-hosted page, though no specific drainer kit signatures were detected. The use of Wix’s branding and hosting infrastructure suggests an attempt to exploit trust in the platform’s subdomains, a tactic commonly observed in credential theft campaigns targeting small businesses and individual users. Infrastructure analysis reveals the following technical indicators: the domain was registered on April 12, 2026, through GoDaddy.com, LLC, and resolves to the IP address 34.144.206.118, hosted on Google Cloud. At the time of detection, 14 out of 95 security vendors on VirusTotal flagged the domain as malicious. The domain appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD. Google Safe Browsing (GSB) did not list the domain at the time of assessment. Technologies detected include Wix’s proprietary framework, React, Google Cloud CDN, and HTTP/3, with a Let’s Encrypt SSL certificate providing HTTPS encryption. The domain is currently offline, likely due to takedown actions by the hosting provider or domain registrar following abuse reports. Despite its inactive status, residual risk remains for users who may have interacted with the site prior to its removal. Organizations are advised to monitor for unauthorized access attempts using credentials potentially compromised during the domain’s active period. Network-level blocking of the IP address 34.144.206.118 and the domain itself is recommended as a precautionary measure. Users should verify the legitimacy of any Wix-branded communication by cross-referencing with official Wix Studio domains and enabling multi-factor authentication to mitigate credential theft risks.