sallybartow[.]wixstudio[.]com

PhishDestroy identifies sallybartow.wixstudio.com as an active fake-login phishing page posing as a legitimate login portal. The site mimics a corporate or personal authentication page to steal credentials and session cookies, then forward victims to their intended destination to mask the theft. Because the page uses HTTPS via Let’s Encrypt and is hosted on Wix’s infrastructure, inexperienced users may believe it is safe. However, the domain is not affiliated with the claimed brand and is solely operated by the threat actor to harvest login details.

This domain was flagged by 19 of 95 VirusTotal vendors and is blocked by three real-time blocklists (OpenPhish, PhishingArmy, OISD). It resolves to IP 34.144.206.118 and is registered via a privacy-protected registrar—common tactics to hinder takedown and attribution. Wix infrastructure is abused because attackers can spin up subdomains quickly and HTTPS issuance is automated, giving the page an air of legitimacy while bypassing browser warnings.

If you visited sallybartow.wixstudio.com and entered any credentials or downloaded files, immediately change passwords on all accounts using the same login details, enable multi-factor authentication, and scan your device with updated antivirus software. Report the incident to your IT or security team and check your account activity for unauthorized access. Do not reuse passwords across services, and consider freezing financial accounts if payment details were entered.