iheyl1[.]wixstudio[.]com

The domain iheyl1.wixstudio.com has been identified as a platform for conducting fake login attacks, potentially targeting users to harvest credentials. This type of phishing infrastructure poses a risk by mimicking legitimate login pages, tricking users into entering sensitive information that can be exploited by threat actors.

Evidence gathered indicates that this domain is currently active, resolving to the IP address 34.144.206.118. The SSL certificate is issued by Let's Encrypt, which is commonly utilized in phishing schemes to lend a layer of legitimacy to fraudulent domains. As of the latest analysis, VirusTotal reports 0 detections out of 95 services, indicating that this domain has not yet been flagged by security vendors. The domain's registration details have not been disclosed, and there are no current blocklist entries against it, which further suggests an ongoing risk.

Users who have interacted with the site or entered personal information should take immediate action. It is recommended to change any passwords that may have been compromised and to enable two-factor authentication on sensitive accounts. Monitoring accounts for unusual activity is crucial. Furthermore, users should report any phishing attempts to relevant authorities, as this may aid in the broader investigation of this phishing infrastructure.