platform-bridge[.]wixstudio[.]com

PhishDestroy identifies platform-bridge.wixstudio.com as an active credential theft domain masquerading as a legitimate Wix-based service. The domain leverages a deceptive WixStudio subdomain to impersonate a trusted web platform, likely aiming to harvest user credentials through fake login portals. While no specific drainer kit has been linked to this campaign, the infrastructure suggests a focus on credential harvesting, a common tactic in phishing operations targeting web service users.

Technical analysis reveals the following indicators: platform-bridge.wixstudio.com resolves to IP 34.144.206.118 and is associated with a Let's Encrypt SSL certificate. The domain was flagged by 5 out of 95 VirusTotal security vendors, indicating limited but notable detection. It appears on 1 security blocklist, including PhishingArmy, and is currently unflagged by Google Safe Browsing. The domain’s infrastructure suggests a recent deployment, though exact creation and registrar details remain unverified in this analysis.

This domain is currently active and poses an elevated risk due to its credential theft focus and partial detection evasion. Immediate response actions include blocking the domain at the network perimeter and updating security controls to flag similar WixStudio subdomains. The remaining risk is moderate, as the domain’s limited blocklist presence and partial VirusTotal detections indicate potential for further undetected campaigns. Users should exercise caution when accessing WixStudio-related services and verify URLs before entering credentials.