exdous-apps[.]wixstudio[.]com

The domain exdous-apps.wixstudio.com has been identified as a high-risk phishing infrastructure designed to harvest user credentials under the guise of a legitimate Wix Studio service. Analysis confirms this domain as a credential theft operation, with no association to the authentic Wix platform. The site is currently inactive, displaying a 404 error page, but prior activity and detection metrics indicate malicious intent. Infrastructure analysis reveals the domain was flagged by 12 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. It was registered through GoDaddy.com, LLC on April 26, 2026, and resolves to the IP address 34.144.206.118. The domain appears on three security blocklists and is actively blocked by multiple threat intelligence feeds, including MetaMask, PhishDestroy, and SEAL. The SSL certificate is issued by Let's Encrypt, a common tactic to lend superficial legitimacy to phishing sites. Current status indicates the domain has been taken offline, but residual risk remains due to its recent malicious activity. Organizations and users are advised to block the domain and IP at the network level, monitor for related indicators of compromise, and verify the legitimacy of any communication claiming to originate from Wix Studio. Security teams should review logs for connections to 34.144.206.118 and investigate potential credential exposure from users who may have interacted with the site prior to its takedown.