us-portfolio[.]wixstudio[.]com

This domain, us-portfolio.wixstudio.com, is currently under investigation for hosting a credential theft operation. The site is designed to mimic legitimate brand portals, tricking visitors into entering sensitive login details such as usernames, passwords, or other authentication credentials. Once submitted, this information is harvested by threat actors for unauthorized account access, financial fraud, or further targeted attacks. The campaign appears to leverage social engineering techniques, likely distributed through phishing emails, fake advertisements, or compromised social media links. Analysis indicates the domain is still active and resolves to the IP address 34.144.206.118, hosted on infrastructure associated with a well-known content delivery platform. As of the latest scan, the domain has not been flagged by any of the 95 security engines on VirusTotal, suggesting it may be a recently deployed or evasive threat. The SSL certificate is issued by Let's Encrypt, a common tactic used to lend an appearance of legitimacy to malicious sites. The domain is registered under the Wix Studio platform, which allows rapid deployment of websites, often exploited by threat actors to quickly set up and dismantle phishing infrastructure. If you or someone in your network has visited us-portfolio.wixstudio.com, immediate action is required. First, do not enter any credentials or personal information on the site. If credentials were already submitted, assume they are compromised and reset passwords for all associated accounts, prioritizing email, financial, and work-related services. Enable multi-factor authentication where available to mitigate unauthorized access. Monitor accounts for suspicious activity, such as unrecognized logins or transactions. Report the domain to your organization's security team or a trusted threat intelligence platform to aid in broader detection efforts. Additionally, scan the device used to access the site for malware, as credential theft campaigns often deploy secondary payloads.