en-ex-adus-ext[.]wixstudio[.]com

The domain en-ex-adus-ext.wixstudio.com is currently under investigation for involvement in credential theft operations. While no direct brand impersonation or crypto drainer kit usage has been confirmed at this stage, the structure and deployment pattern of the domain are consistent with known phishing campaigns that target user credentials. There is no evidence yet linking the domain to a specific brand, but its subdomain structure suggests a possible attempt to mimic enterprise or financial services portals.

Technical analysis reveals several key indicators. VirusTotal reports a 0/95 detection rate, indicating that the domain has not yet been flagged by major scanning engines. The domain resolves to IP address 34.144.206.118. Registrar details and creation date are currently unavailable but are being queried for enhanced attribution. No hits have been found on global blocklists or Google Safe Browsing at the time of this report. The absence of detections and blocklist entries suggests that the domain is newly active or operating below typical detection thresholds.

The domain remains live and accessible, representing an ongoing risk for users who may be targeted with credential theft schemes. Immediate response actions should include blocking the resolved IP and domain at the network perimeter and monitoring for related indicators in user traffic. Users are advised to exercise caution with unsolicited messages referencing this domain. Continued monitoring is recommended as the threat is active and may evolve to include brand impersonation or integration into broader phishing campaigns.