bridge-trezer-pages[.]wixstudio[.]com

PhishDestroy identifies bridge-trezer-pages.wixstudio.com as a domain actively hosting a generic phishing campaign. This WixStudio subdomain shows no affiliation with legitimate entities and exhibits traits of a drainer kit designed to harvest user credentials or sensitive data. The campaign lacks branding ties, suggesting opportunistic targeting rather than a focused impersonation effort.

Technical indicators confirm this domain’s malicious nature: VirusTotal scores it 3/95 detections, indicating evasion of current antivirus engines. The domain resolves to Google Cloud IP 34.144.206.118 and uses a Let’s Encrypt SSL certificate for HTTPS obfuscation. While the registrar and creation date remain unverified in public datasets, the domain’s active status and zero VirusTotal detections highlight its stealthy operation. Google Safe Browsing (GSB) has not yet flagged it, and no blocklist entries were found in open-source threat intelligence feeds as of seed 8016f6.

This domain remains under active investigation with a status of 'active'. Users should block access to bridge-trezer-pages.wixstudio.com immediately and avoid interacting with its content. The remaining risk is high due to the drainer kit’s potential to exfiltrate data despite low current detection rates. Security teams are advised to monitor for lateral movement if credentials were exposed and to report the domain to threat intelligence platforms for broader blocking.