extnsion-us[.]wixstudio[.]com

PhishDestroy assesses extnsion-us.wixstudio.com as ACTIVE in a browser-update phishing campaign targeting users with fake Chrome or Edge update prompts. The site abuses the legitimate Wix Studio platform to host spoofed update pages, leveraging a Let’s Encrypt SSL certificate to appear trustworthy. Current risk is UNDER INVESTIGATION pending deeper behavioral analysis and host-reputation correlation. Users encountering pop-ups or redirects to this domain should not interact and should report the incident immediately.

This domain was flagged by PhishDestroy’s automated pipeline on seed a2a9bf. VirusTotal currently returns 0/95 vendor detections and the domain resolves to IP 34.144.206.118. Certificate transparency records show issuance by Let’s Encrypt on a recent date; the domain is hosted on the Wix Studio platform and has not yet appeared on major blocklists such as Google Safe Browsing, PhishTank, or OpenPhish. Domain age and registrar details remain under scrutiny as the campaign evolves.

Mitigation for browser-update phishing includes disabling automatic pop-ups in browser settings, verifying update sources directly at vendor websites, and deploying endpoint protection that blocks known phishing domains. Users should enable browser-based phishing protection and report suspicious pages to PhishDestroy via its submission portal. Organizations are advised to add extnsion-us.wixstudio.com to network blocklists and to conduct user awareness training focused on recognizing fake update prompts.