sso[.]wigilive[.]co[.]uk

The domain sso.wigilive.co.uk was configured to impersonate a legitimate single sign-on portal, likely targeting Microsoft 365 or corporate credentials. The page titled "Sign in to your account" is a classic phishing lure designed to steal usernames and passwords. This type of generic phishing attack often leads to account takeover, data breaches, or lateral movement within an organization.

Evidence from security scans shows the domain was created on April 14, 2026, and registered through Team Blue Internet Services UK Limited t/a names.co.uk. It resolves to IP address 192.3.7.7 and uses a Let's Encrypt SSL certificate (R13) for a false sense of security. VirusTotal analysis reveals that 20 out of 95 security vendors flagged this domain as malicious, and it appears on 1 security blocklist. Google Safe Browsing also flags it for phishing. The domain is now offline, but the risk remains high for users who may have visited it earlier.

If you or someone in your organization visited sso.wigilive.co.uk and entered credentials, immediately change the password for that account and enable multi-factor authentication. Monitor for suspicious activity and report the incident to your security team. PhishDestroy provides additional tools to verify suspicious URLs and protect against credential theft.