live-onpage[.]wixstudio[.]com

This domain, live-onpage.wixstudio.com, is identified as a high-risk generic phishing site specifically designed to impersonate legitimate login pages. The goal of the threat actors is to deceive users into entering their credentials, which can then be harvested and used for unauthorized access to accounts or further malicious activities.

Analysis indicates that the domain is flagged by 15 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion. The domain was created on April 24, 2026, and is registered through GoDaddy.com, LLC. It currently resolves to the IP address 34.144.206.118 and is hosted using Wix, React, and Google Cloud technologies, including Google Cloud CDN and HTTP/3. The domain has been taken offline but still appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD. The SSL certificate is issued by Let's Encrypt, and the Gridinsoft trust score for this domain is 0 out of 100, indicating no trustworthiness.

If users have visited this domain, they should immediately change their passwords for any accounts they may have accessed while on the site. Additionally, users should monitor their accounts for any unauthorized activity and consider enabling two-factor authentication (2FA) for added security. It is also recommended to run a full system scan using updated antivirus software to ensure that no malicious components were installed. Users should report any suspicious activity to their IT department or a trusted cybersecurity professional.