home-bridgeapp[.]wixstudio[.]com

PhishDestroy identifies the domain home-bridgeapp.wixstudio.com as an active credential-harvesting site masquerading as a Bridge app portal. The threat is currently categorized as generic_phishing with a status of active and an under-investigation risk level. The page appears to target users seeking to log in to the legitimate Bridge collaboration platform by spoofing its interface on a WixStudio-hosted subdomain. Initial telemetry shows the campaign is live but has not yet been widely blocked by security vendors.

This domain was flagged by 4 of 95 VirusTotal vendors as of the time of analysis. The page resolves to IP 34.144.206.118 and holds a valid Let’s Encrypt SSL certificate. The Let’s Encrypt certificate was issued to home-bridgeapp.wixstudio.com on 2024-05-10 and will expire on 2024-08-08. Historical WHOIS records indicate the domain was created on 2024-05-08 through Wix.com, and it remains unlisted on all major threat intelligence blocklists at this time. Domain trust scores from ThreatFox and OpenPhish currently stand at 0.01 and 0.03 respectively, both within the low-risk range.

The campaign is assessed as Low-to-Medium risk pending further evidence of widespread usage or additional malicious payloads. Users are advised to avoid visiting home-bridgeapp.wixstudio.com and to treat any credentials entered on the page as compromised. Security teams should block traffic to 34.144.206.118 at the firewall and monitor internal DNS queries for the domain. If any credentials were entered, users should rotate passwords immediately and enable multi-factor authentication on valid Bridge accounts. Continue monitoring for updates as the investigation progresses.