get-started-en[.]wixstudio[.]com

This domain, get-started-en.wixstudio.com, is identified as a credential harvesting phishing site targeting users through deceptive login interfaces. Analysis indicates the domain was designed to impersonate legitimate authentication portals, likely aiming to harvest sensitive credentials such as usernames, passwords, or multi-factor authentication codes. As of the latest assessment, the domain has been taken offline, though prior activity suggests it was actively used in phishing campaigns. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC, with an SSL certificate issued by Let’s Encrypt, a common tactic to lend superficial legitimacy. The domain resolves to the IP address 34.144.206.118, which has been flagged by 1 of 95 security vendors on VirusTotal. It appears on a single security blocklist, indicating limited but confirmed detection. The domain was created on April 04, 2026, suggesting a recently deployed phishing resource intended for short-term use before takedown. The use of a subdomain under wixstudio.com may have been an attempt to exploit trust in the parent domain’s branding. Current status confirms the domain is offline, likely following detection and mitigation efforts. However, the infrastructure remains a potential vector for future phishing activity. Organizations are advised to monitor for related indicators, including the IP address 34.144.206.118 and any subdomains under wixstudio.com. Network-level blocking of the IP and domain is recommended as a precautionary measure. Users who may have interacted with the domain should reset credentials and enable multi-factor authentication on critical accounts. Security teams should review logs for connections to 34.144.206.118 or the domain to identify potential compromise.