chromewebstore[.]wixstudio[.]com

This domain is flagged as a high-risk credential harvesting phishing site designed to mimic legitimate browser extension marketplaces. Analysis indicates the infrastructure was specifically engineered to deceive users into submitting authentication credentials, payment details, or other sensitive information through counterfeit web store interfaces. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on April 04, 2026, and currently resolves to the IP address 34.144.206.118. The SSL certificate is issued by Let's Encrypt, providing a superficial layer of legitimacy. Detection metrics show 12 out of 95 security vendors on VirusTotal have flagged the domain as malicious. The domain appears on three security blocklists and is actively blocked by multiple browser-based security extensions and fraud detection systems. Mitigation requires immediate domain takedown through registrar abuse channels and IP-based blocking at the network level. Users who may have interacted with the domain should reset credentials for any accounts accessed during the exposure window. Organizations should deploy endpoint protection rules to prevent navigation to this domain and monitor for related indicators of compromise, including the associated IP address and SSL certificate thumbprint. Security teams are advised to review logs for connections to 34.144.206.118 and correlate with authentication events to identify potential credential exposure.