place-bridge[.]wixstudio[.]com

PhishDestroy identifies place-bridge.wixstudio.com as an active phishing domain posing as a legitimate Bridge platform service. This domain leverages the Wix Studio hosting infrastructure to deliver convincing login pages aimed at harvesting corporate credentials. The threat actor behind this campaign has configured the site to impersonate Bridge’s authentication portal, tricking users into submitting their corporate email and password combinations. The phishing kit appears to target employees of organizations using Bridge for project management or team collaboration, potentially granting attackers access to sensitive internal communications and data. This domain resolves to IP address 34.144.206.118 and currently remains undetected by security vendors, showing 0 detections out of 95 on VirusTotal. It utilizes a Let’s Encrypt SSL certificate to enhance legitimacy. While the exact creation date is not publicly available, the use of a Wix subdomain suggests recent deployment. Recent telemetry indicates limited but growing traffic, likely driven by phishing emails or malicious links shared via social engineering campaigns. The domain has not yet been added to major threat intelligence blocklists, increasing the risk of exposure to unaware users. If you or your employees have visited place-bridge.wixstudio.com or entered any credentials, immediately rotate passwords associated with that account and enable multi-factor authentication. Report the incident to your security team and scan all connected devices for malware or unauthorized access. Do not trust future emails purporting to be from Bridge unless they are digitally signed and verified through official channels. Consider blocking this domain at your DNS or firewall level using indicator 34.144.206.118 and the full URL place-bridge.wixstudio.com. Monitor for any unusual login attempts or data exfiltration from accounts previously accessed via this domain.