official-pages[.]wixstudio[.]com

PhishDestroy identifies official-pages.wixstudio.com as an active phishing site exploiting Wix's free website builder to host fraudulent login pages. This domain, resolving to IP 34.144.206.118, leverages Let’s Encrypt SSL certificates to appear legitimate while harvesting user credentials. The infrastructure choice (Wix) complicates takedowns due to shared hosting environments, making it a persistent threat vector for credential theft campaigns. This domain currently exhibits zero detections on VirusTotal (4/95 engines), indicating a low signature presence despite active abuse. While the registrar and creation date remain obscured by Wix’s privacy protections, the domain’s malicious intent is confirmed through its active phishing content and infrastructure ties to a known threat actor. Blocklist aggregators have not yet flagged this domain, leaving endpoints vulnerable to exploitation. Users who visited this domain should immediately check for unauthorized account access, change passwords for potentially compromised services, and scan devices with updated anti-malware tools. Report the domain to security teams or block it via firewall rules. Avoid interacting with any prompts requesting login credentials, as this site is engineered to steal sensitive information. Organizations are advised to monitor outbound traffic for connections to 34.144.206.118 and block accordingly.