platform-livdesktop[.]wixstudio[.]com

PhishDestroy identifies platform-livdesktop.wixstudio.com as an active generic phishing domain, currently classified under investigation with a high-risk classification due to its suspected involvement in fake login credential theft campaigns. The domain mimics legitimate online services to deceive users into surrendering sensitive authentication details, including passwords and recovery codes. Technical indicators such as the use of a Let’s Encrypt SSL certificate and hosting on IP 34.144.206.118 suggest initial legitimacy, but behavioral analysis reveals malicious intent consistent with credential harvesting operations.

This domain was flagged by PhishDestroy’s automated monitoring pipeline using seed 9c63a1. Current intelligence shows zero detections across 95 VirusTotal engines, indicating low detection coverage despite active malicious activity. The domain resolves to a Google Cloud Platform IP (34.144.206.118) via Wix-hosted infrastructure, leveraging a shared hosting environment to obscure malicious operations. Registrar data indicates recent creation aligned with the campaign’s operational timeline. The absence of blocklist entries highlights the need for proactive threat discovery beyond traditional signature-based detection.

To mitigate risk, users are advised to refrain from entering any credentials or payment information on this domain. Organizations should consider blocking the domain and associated IP at the network perimeter using DNS filtering or firewall rules. PhishDestroy users can submit reports via the browser extension to aid in rapid takedown requests. Always verify URLs through trusted sources and use multi-factor authentication to reduce exposure to credential theft. Report suspicious domains immediately to PhishDestroy for analysis and community protection.