apps-212tradiing[.]wixstudio[.]com

This domain, apps-212tradiing.wixstudio.com, is identified as a credential harvesting phishing site designed to impersonate the legitimate Trading 212 investment platform. The page title, 'Log In® | Trading 212™ | Access Your Account®,' closely replicates the authentic login portal, increasing the likelihood of successful deception. Infrastructure analysis reveals the use of Wix hosting and Google Cloud CDN, which are frequently exploited due to their accessibility and perceived legitimacy. The site employs HTTPS via a Let's Encrypt SSL certificate, further enhancing its deceptive appearance to unsuspecting users. Evidence supporting this assessment includes detection by 4 out of 95 security vendors on VirusTotal, indicating cross-industry recognition of its malicious intent. The domain was registered through GoDaddy.com, LLC, and its creation date of June 11, 2026, suggests an attempt to exploit future-dated registration to evade immediate scrutiny. It currently appears on 3 security blocklists, including PhishDestroy and PhishingArmy, and resolves to the IP address 34.144.206.118. The domain has since been taken offline, but its prior activity remains a documented threat. Users who visited this domain should immediately revoke any credentials entered, as they may have been transmitted to unauthorized third parties. It is recommended to monitor associated financial accounts for unauthorized transactions and enable multi-factor authentication where available. If browser-based password managers were used, stored credentials for Trading 212 or similar platforms should be updated. Organizations should review logs for connections to 34.144.206.118 and the domain itself to assess potential exposure. Proactive measures, such as deploying endpoint detection rules for known phishing infrastructure, can mitigate future risks associated with similar threats.