platform-bridgehome[.]wixstudio[.]com

PhishDestroy identifies platform-bridgehome.wixstudio.com as the hosting endpoint of an active SSL-secured phishing kit deployed to harvest user credentials. Evidence shows this domain resolves to a single IPv4 address (34.144.206.118) and leverages a valid Let’s Encrypt TLS certificate to increase authenticity and evade browser warnings. The campaign remains under investigation but has already been observed delivering generic login spoofs via Wix-hosted studios, tricking users into entering passwords they believe are destined for legitimate platforms.

Technical indicators corroborate the threat: VirusTotal presents a perfect 4 out of 95 detection ratio, suggesting that no antivirus engine has yet flagged the payload, while the domain employs a free Wix subdomain structure that lowers operational cost for attackers and accelerates deployment. Historical DNS records indicate creation within the last thirty days, aligning with the aggressive lifecycle typical of short-lived phishing infrastructures. The domain remains unlisted on all major threat intelligence blocklists, providing an additional window of opportunity for the campaign to inflict damage before reputation systems catch up.

Users who visited platform-bridgehome.wixstudio.com should immediately close the tab, clear browser cookies, and run a reputable password manager audit to rotate any credentials that may have been entered. Reset passwords independently by navigating directly to the official website instead of clicking embedded links. Report the URL to your organization’s security team and forward the link to PhishDestroy’s threat-intel inbox for inclusion in the seed-43f61a campaign feed. Disable autofill features and enable multi-factor authentication wherever possible to reduce future exposure to credential harvesting schemes.