enus-exudus[.]wixstudio[.]com

PhishDestroy identifies enus-exudus.wixstudio.com as an active credential-harvesting phishing site designed to trick users into surrendering Microsoft account credentials.

This domain, hosted on WixStudio with a Let's Encrypt SSL certificate, resolves to IP 34.144.206.118 and was created recently enough to evade long-term detection. VirusTotal shows 9/95 engines flagging the site, yet it has already been blocked by PhishingArmy, MetaMask, and SEAL across 3 security blocklists. The domain’s low detection rate combined with its active hosting suggests an ongoing campaign leveraging recently registered infrastructure to harvest credentials under the guise of a legitimate Microsoft login portal.

PhishDestroy assesses this site as HIGH RISK due to its specific targeting of Microsoft account credentials and active evasion of detection mechanisms. Users who encounter this domain should avoid entering any login information and report the site immediately to their security provider. Organizations are advised to deploy browser-based URL filtering rules to block enus-exudus.wixstudio.com and monitor for related credential dumps on dark web monitoring platforms. Immediate account password reset is recommended for any user who may have entered credentials on this fraudulent page.