bridge-user[.]wixstudio[.]com

PhishDestroy identifies bridge-user.wixstudio.com as an active fake login portal designed to harvest user credentials. This Wix-hosted subdomain mimics legitimate login interfaces to trick victims into entering sensitive information such as usernames, passwords, or financial data. The threat is classified as a credential phishing attack, targeting users who may assume the site is part of a trusted service due to its WixStudio domain. Security teams should treat this domain as a high-risk indicator of compromise (IOC) and block all associated traffic immediately.

This domain was flagged during a routine scan with the following intelligence: VirusTotal shows 0 out of 95 detection engines flagging the site, indicating low initial detection but not confirming safety. The domain resolves to IP 34.144.206.118, which is associated with cloud hosting infrastructure commonly abused by threat actors. Notably, the domain uses a Let's Encrypt SSL certificate, a tactic often employed to increase trust perception among potential victims. While the creation date and registrar details were not provided in the initial scan, the combination of low detection rates and SSL usage suggests a recently deployed or evasive campaign.

If you visited bridge-user.wixstudio.com, assume your credentials may have been compromised. Do not reuse passwords across services. Rotate passwords immediately, enable multi-factor authentication (MFA) on all related accounts, and run a malware scan on your device. Report the incident to your IT or security team and consider revoking any sessions initiated from this domain. Monitor financial accounts for unusual activity. For further analysis and ongoing monitoring, visit the full PhishDestroy report.