smartrexor-io[.]wixstudio[.]com

This domain is currently under investigation for credential theft phishing, a threat type involving the fraudulent capture of login credentials through deceptive landing pages. Analysis indicates a risk level of under_investigation, suggesting preliminary findings require further validation before definitive classification. Infrastructure analysis reveals the domain smartrexor-io.wixstudio.com remains active and resolves to the IP address 34.144.206.118. As of the latest scan, VirusTotal reports 0 detections out of 95 engines, indicating no prior flagging by security vendors. The domain is hosted on Wix Studio’s platform, a legitimate service often exploited for phishing due to its ease of deployment. The SSL certificate is issued by Let’s Encrypt, a common provider for both legitimate and malicious sites, offering no inherent trust differentiation. No blocklist entries or adverse trust scores were identified at the time of assessment, though the absence of detections does not preclude malicious intent. Mitigation steps specific to credential theft phishing should include immediate monitoring of network traffic for connections to 34.144.206.118 or subdomains of wixstudio.com. Organizations are advised to implement DNS-based blocking for the domain and conduct retrospective log analysis to identify prior interactions. End-user training should emphasize recognizing deceptive login prompts, particularly those mimicking corporate or financial institution portals. Given the domain’s active status and lack of prior detections, security teams are encouraged to submit samples for sandbox analysis to confirm payload behavior and credential exfiltration endpoints.