usa-mexxeapps[.]wixstudio[.]com

The domain usa-mexxeapps.wixstudio.com has been identified as a credential theft operation targeting users through deceptive login portals. Analysis indicates the domain is currently offline, though it previously hosted malicious content designed to harvest authentication credentials. No specific brand impersonation was confirmed, but the infrastructure aligns with credential harvesting campaigns observed in recent months. Infrastructure analysis reveals the domain resolved to the IP address 34.144.206.118 and was registered through GoDaddy.com, LLC on June 13, 2026, an unusually future-dated registration likely indicative of evasion tactics. The domain was flagged by 6 of 95 security vendors on VirusTotal and appeared on 3 distinct security blocklists, including PhishDestroy, PhishingArmy, and OISD. The SSL certificate was issued by Let's Encrypt, a common choice for both legitimate and malicious domains due to its accessibility. The page title, '404 Error: Page Not Found | Wix Studio,' suggests either a takedown or deliberate obfuscation of the original malicious content. Current status confirms the domain is offline, reducing immediate risk to end users. However, the infrastructure remains a potential vector for future malicious activity. Organizations are advised to block the domain and its associated IP (34.144.206.118) at the perimeter, monitor for residual DNS queries, and review logs for prior connections. Users who may have interacted with the domain should reset credentials for any accounts accessed during the exposure window. Future registrations under similar naming conventions or the same registrar should be scrutinized for suspicious patterns.