live-en-us[.]wixstudio[.]com

PhishDestroy identifies live-en-us.wixstudio.com as an active credential theft domain masquerading as a legitimate Wix service. Current status is under investigation, but the domain is actively resolving and propagating malicious content. This site specifically targets users through brand impersonation, tricking victims into entering sensitive login credentials under the guise of a Wix-hosted portal. This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, indicating it has not yet been widely recognized as malicious despite suspicious infrastructure. The domain resolves to IP 34.144.206.118, hosted on Let’s Encrypt SSL infrastructure. No creation date or registrar information is publicly available, and the domain has not yet been listed on major threat blocklists, resulting in a neutral trust score. Despite low detection rates, the presence of a valid SSL certificate and hosting on a reputable cloud provider suggests potential for evasion and sustained operation. This domain poses a moderate-to-high risk due to its use of legitimate hosting and SSL, which can deceive users and bypass basic security filters. Given the lack of detections and active resolution, immediate containment is advised. Security teams should block the domain at the DNS and network levels, inspect endpoints for signs of credential submission, and update browser and email security policies to flag similar Wix impersonations. Continuous monitoring is required as this threat may escalate with further compromise of user accounts.