exeduso-en[.]wixstudio[.]com

This domain, exeduso-en.wixstudio.com, is currently under investigation for credential theft activity targeting unsuspecting users. Analysis indicates the site is designed to harvest login credentials through deceptive forms and redirects, though no specific brand impersonation has been confirmed at this stage. The domain remains active and operational, posing a potential risk to visitors who may unknowingly submit sensitive information. Infrastructure analysis reveals the domain resolves to the IP address 34.144.206.118, hosted on a platform associated with Wix Studio. As of the latest assessment, the domain has not been flagged by any of the 95 vendors on VirusTotal, indicating it may still evade detection in many security systems. The SSL certificate is issued by Let's Encrypt, a common provider for both legitimate and malicious sites, and no creation date or registrar details are publicly available for further context. No blocklist entries or trust score deviations have been recorded, which may contribute to its current low visibility in threat intelligence feeds. The domain remains active, and users are advised to exercise caution when interacting with it. Security teams should monitor network traffic for connections to 34.144.206.118 and the domain itself, as these serve as concrete indicators of compromise. Immediate steps include blocking the domain and IP at the perimeter, implementing browser-based warnings for internal users, and conducting retrospective analysis of logs for prior interactions. Given the lack of detections, manual inspection of the site's content and behavior is recommended to identify specific credential harvesting mechanisms.