ssoholdapps[.]wixstudio[.]com

PhishDestroy identifies ssoholdapps.wixstudio.com as a generic phishing domain currently impersonating single sign-on (SSO) login pages. The threat type is credential theft via a fake authentication portal, designed to harvest user login details under the guise of a legitimate SSO service. This domain is categorized as under_investigation with an active status, indicating ongoing monitoring but insufficient evidence for definitive classification at this stage. Users should treat any prompts from this domain as suspicious until further analysis is complete. This domain was flagged with 3/95 VirusTotal detections as of the latest scan, indicating it has not yet been widely recognized by antivirus engines. It resolves to IP 34.144.206.118 and uses a Let’s Encrypt SSL certificate, which does not guarantee legitimacy. The domain is hosted on WixStudio, a legitimate website builder, which may be leveraged to quickly deploy and disguise phishing pages. No blocklist or trust score data is currently available for this domain, leaving its reputation undefined. The absence of detections and blocklist entries suggests this campaign may be newly active or narrowly targeted. To mitigate risk, avoid interacting with ssoholdapps.wixstudio.com or any linked login pages. Do not enter credentials, even if prompted. Report this domain to your security team or use a URL checker tool to verify authenticity before clicking. If you suspect exposure, change passwords immediately and enable multi-factor authentication on all accounts. Monitor financial transactions for unauthorized activity if credentials were entered. Enterprise users should consider blocking the IP 34.144.206.118 at the firewall level to prevent access to this domain.