dop994[.]wixsite[.]com

PhishDestroy identifies dop994.wixsite.com as an active credential harvesting phishing domain targeting unsuspecting users under an elevated risk classification.

This domain, hosted on Wix’s platform, resolves to IP 34.144.206.118 and operates with a Let’s Encrypt SSL certificate. VirusTotal analysis reveals detection by 11 of 95 security vendors, indicating consistent but not universal consensus on its malicious nature. The domain was created on an unspecified date and remains active, leveraging Wix’s legitimate infrastructure to lend false credibility to its fraudulent scheme.

Currently flagged as an active credential harvesting phishing site, dop994.wixsite.com poses a direct threat to users tricked into submitting login credentials or sensitive information. Immediate action is recommended: block the domain at the network and endpoint levels, inspect recent DNS resolutions to this IP for lateral movement, and educate users on verifying site legitimacy before data entry. Given its use of a trusted hosting provider and SSL encryption, users must rely on behavioral cues and reputation-based detection to avoid compromise.