client-bridge[.]wixstudio[.]com

The domain client-bridge.wixstudio.com has been identified as a credential phishing endpoint targeting users through deceptive authentication prompts. Analysis confirms the domain is currently offline, though prior activity suggests it impersonated legitimate services to harvest login credentials. The page title, "404 Error: Page Not Found | Wix Studio," indicates either a cloaking mechanism or a defunct phishing page hosted on a compromised or abused subdomain. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC, with a creation date of May 02, 2026, which may reflect an attempt to appear legitimate or a registration error. It resolves to the IP address 34.144.206.118, associated with cloud hosting infrastructure. Detection metrics indicate 7 of 95 security vendors flagged the domain as malicious on VirusTotal, while it appears on one security blocklist. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious actors. Additional indicators include a Gridinsoft trust score of 0/100 and detected technologies such as Wix, React, Google Cloud, and Google Cloud CDN, suggesting the use of mainstream hosting and content delivery networks to evade initial scrutiny. Current status confirms the domain has been taken offline, though residual risks may persist if the infrastructure remains under adversary control. Organizations are advised to block the domain and its resolving IP (34.144.206.118) at the network perimeter. Security teams should review logs for prior connections to this endpoint, particularly those involving authentication attempts. Given the use of cloud hosting, monitoring for similar subdomains or IPs within the same provider is recommended. Users who may have interacted with the domain should reset credentials and enable multi-factor authentication on affected accounts.