online-bridgesso[.]wixstudio[.]com

On 24 July 2026, the domain online-bridgesso.wixstudio.com was observed hosting a generic phishing campaign. The domain is registered through Wix.com Ltd., a commercial website‑builder service, and currently resolves to the IP address 162.159.143.12. DNS queries return no nameserver records, indicating that the authoritative NS information is unavailable or obscured. The domain appears on a single security blocklist and is actively listed by PhishDestroy, confirming its malicious classification by at least one external sinkhole.

VirusTotal analysis shows that the URL was submitted to 91 scanning engines; none of the engines reported a detection at the time of analysis. The absence of detections does not constitute evidence of benign behavior, and the lack of a detection signal may reflect limited coverage of the particular payload or rapid takedown. No additional intelligence such as SSL certificate details, HTTP response codes, or page title information is presently available, leaving the visual or functional characteristics of the site unverified. The infrastructure—hosting on a shared Wix‑provided IP—suggests that the operator leveraged a legitimate SaaS platform to obtain a fast‑deployable web presence, a pattern frequently observed in transient phishing operations.

Given the current evidence, defenders should add online-bridgesso.wixstudio.com to domain blocklists, enforce outbound filtering for connections to the resolved IP, and monitor related Wix‑hosted subdomains for similar activity. Continuous re‑scanning with multi‑engine services is recommended to capture potential future detections, and any observed credential harvesting attempts should be treated as compromised. The campaign remains active, and further investigation is warranted to determine the targeted brand or credential type.