learn-livepage[.]wixstudio[.]com

Analysis of the domain learn-livepage.wixstudio.com shows that it is currently active and has been identified as a generic phishing infrastructure. The domain resolves to the IP address 162.159.143.12, which is hosted by the Wix.com Ltd. platform, indicating that the attacker is leveraging a widely used website‑building service to obtain a legitimate‑looking hosting environment. Registration information ties the domain to Wix.com Ltd., confirming the use of that registrar for the malicious site. The domain has been listed on a single security blocklist and is actively blocked by the PhishDestroy filtering service, demonstrating that at least one downstream security product has taken mitigation action.

A VirusTotal scan was performed by 91 independent scanners, and none reported a detection; while this suggests that automated signatures have not yet flagged the payload, the absence of detections does not imply safety and should be interpreted as a lack of current static indicators rather than a clean bill of health. Nameserver records could not be retrieved (NS_NOT_FOUND), limiting visibility into the DNS configuration and potential redundancies. No SSL/TLS certificate details, HTTP response codes, page titles, or content snapshots are presently available, leaving the exact phishing lure and targeted brand undefined.

Consequently, defenders should treat the domain as a high‑confidence phishing indicator based on its infrastructure profile and existing blocklist presence. Recommended actions include adding the domain to internal block and allow‑list exclusions, monitoring for any DNS changes, correlating network traffic to the IP 162.159.143.12, and employing heuristic or behavior‑based detection to capture any payload that may be delivered from the site. Continuous re‑evaluation is advised, as additional telemetry such as page content or SSL fingerprints may emerge and refine the threat characterization.