en-bridge-us[.]wixstudio[.]com

PhishDestroy has flagged the domain en-bridge-us.wixstudio.com for impersonating Enbridge in an active credential-phishing campaign. The fraudulent site poses as a secure portal to harvest usernames and passwords, redirecting visitors to a spoofed login that mirrors Enbridge’s brand assets. Anyone who enters credentials risks immediate account takeover and possible financial theft, with stolen data likely sold on dark-web markets or used in follow-on BEC attacks. This domain was flagged through automated crawlers that detected generic phishing payloads. It resolves to the IP address 34.144.206.118 and uses a Let’s Encrypt SSL certificate to appear legitimate. VirusTotal currently shows zero detections out of 95 engines, indicating it remains under the radar for most antivirus tools. The site is hosted on WixStudio, a free website builder frequently abused by low-skill actors to spin up phishing lures quickly. If you visited en-bridge-us.wixstudio.com, stop any data entry immediately. Do not click anything on the page or download files. Disconnect from the internet if possible, then clear your browser cache and cookies. Change the Enbridge password you may have typed on any similar-looking page, enable multi-factor authentication, and scan your devices for malware. Report the incident to Enbridge’s official abuse channel and monitor financial accounts for unauthorized charges. Forward the URL to PhishDestroy’s takedown queue so we can blacklist it faster.