learn-liveapp[.]wixstudio[.]com

PhishDestroy identifies learn-liveapp.wixstudio.com as an active domain associated with a generic phishing campaign suspected of deploying a cryptocurrency drainer kit. The page mimics a legitimate LiveApp interface, prompting users to connect their crypto wallets under false pretenses. The domain was flagged under seed b1eef5 for hosting a fraudulent login portal designed to exfiltrate wallet credentials and private keys, consistent with automated drainer scripts observed in similar campaigns targeting DeFi users. This domain resolves to IP 34.144.206.118 and operates under the WixStudio hosting platform. VirusTotal currently reports zero detections (4/95) and the site holds a valid Let’s Encrypt SSL certificate. Historical records indicate recent domain creation with no prior blocklist presence. At present, Google Safe Browsing (GSB) has not flagged the domain, and it remains absent from major threat intelligence feeds, suggesting limited exposure but high risk due to active deployment. The domain is currently active and under investigation by multiple threat intelligence teams. Immediate response actions include domain takedown requests and browser warning list submissions. While the current risk is classified as "under_investigation," the absence of detections and fresh infrastructure pose a latent threat to unsuspecting users. PhishDestroy advises against interacting with this domain and recommends verifying any LiveApp login links via official channels. Users exposed to this site are urged to revoke connected wallet permissions immediately.