bridge-trasr[.]wixstudio[.]com

PhishDestroy identifies bridge-trasr.wixstudio.com as an ACTIVE credential harvesting domain currently under investigation. This domain exhibits clear indicators of malicious intent, specifically designed to mimic legitimate services and deceive users into surrendering sensitive credentials. The phishing infrastructure remains operational, with no current detections across reputable threat intelligence platforms, suggesting either evasion tactics or a recently deployed campaign. Immediate containment and behavioral analysis are strongly advised to mitigate potential compromise.

Technical indicators confirm this domain resolves to IP 34.144.206.118 and leverages a Let's Encrypt SSL certificate for legitimacy obfuscation, despite lacking trustworthiness. VirusTotal currently reports 14/95 detections, indicating a stealthy deployment with no signature-based recognition. The domain operates through Wix’s hosted studio platform, complicating immediate takedown efforts due to shared infrastructure dependencies. No historical blocklist entries or trust score mitigations exist at this time, further emphasizing its evolving threat profile.

Mitigation steps for credential harvesting threats require immediate DNS-based blocking of the domain and associated IP. Organizations should deploy email filtering rules targeting domains hosted on Wix studio services, particularly those employing recently registered or anomalous naming conventions. User awareness training must emphasize verification of URL structures, SSL certificate validity, and contextual legitimacy before credential submission. Security teams are urged to monitor for anomalous authentication requests originating from affected users and implement multi-factor authentication as a secondary defense layer.