infosys-bridgee[.]wixstudio[.]com

PhishDestroy identifies infosys-bridgee.wixstudio.com as a credential theft domain actively mimicking Infosys Bridge, a legitimate business platform, to harvest corporate login credentials. The threat actor leverages a legitimate Wix Studio subdomain (wixstudio.com) to lend false legitimacy while hosting a spoofed login portal designed to capture user credentials under the guise of an Infosys Bridge integration. Users entering credentials risk corporate account takeover, enabling lateral movement within enterprise environments. This domain is currently classified as under investigation with active hosting on 34.144.206.118. This domain was flagged with 0 detections across 95 VirusTotal engines as of the latest scan, indicating minimal signature-based detection. The site operates under a Let's Encrypt SSL certificate to mask malicious traffic as secure HTTPS. While the domain’s creation date and registrar remain unverified due to the use of Wix’s subdomain structure, the infrastructure points to a hosted solution on Google Cloud (IP 34.144.206.118). Current blocklist inclusion stands at zero, suggesting low global awareness despite active abuse. Individuals or employees who accessed this site should immediately reset passwords for any accounts entered, enable multi-factor authentication where available, and report the incident to their IT security team. Avoid clicking links or downloading files from untrusted domains, especially those claiming to be official business portals. Monitor accounts for unusual activity and consider revoking any session tokens if compromise is suspected. Report the domain to your security provider for blocking to prevent further exploitation. 5ada22