advance-liveapp[.]wixstudio[.]com

PhishDestroy identifies advance-liveapp.wixstudio.com as a live, active phishing domain exploiting WixStudio hosting to impersonate legitimate applications. The domain leverages a generic branding strategy, likely targeting unsuspecting users through deceptive links or social engineering tactics. No specific drainer kit (e.g., wallet drainers like AngelDrainer or Inferno) is confirmed in current intelligence, suggesting a preliminary or evolving phishing campaign focused on credential harvesting or malicious downloads.

This domain resolves to IP 34.144.206.118 and is hosted under Wix’s infrastructure (WixStudio). VirusTotal analysis shows 15/95 security vendors detect malicious activity, indicating a low detection rate despite its active status. The domain’s SSL certificate is issued by Let’s Encrypt, providing a false sense of legitimacy. The creation date is undetermined in available data, but its presence on 1 security blocklist (PhishingArmy) confirms prior identification as a threat vector. Google Safe Browsing (GSB) status is not confirmed in the provided intelligence, leaving its broader web reputation uncertain.

The domain remains in an under-investigation state with an active threat classification. Current response actions include blocking by PhishingArmy, but no further mitigation (e.g., takedown or ISP intervention) is documented. The remaining risk is moderate due to low detection rates (15/95) and reliance on trusted hosting services. Users are advised to avoid interactions, report suspicious activity, and validate domains before engaging. Security teams should monitor this domain for escalation, as its low initial detection could signal a growing threat.