platforms-applive[.]wixstudio[.]com

PhishDestroy identifies platforms-applive.wixstudio.com as a confirmed phishing domain impersonating a legitimate Wix-based application page. The site is configured to harvest user credentials under the guise of a login or update prompt. No specific drainer kit or brand masquerade has been extracted from the page payload so far, but the page structure and SSL certificate (Let’s Encrypt) are consistent with generic phishing kits observed in Q2 2024 campaigns.

Technical indicators confirm elevated risk: VirusTotal reports 3/95 detection engines flagging the domain as malicious. The domain resolves to a single IPv4 address, 34.144.206.118, hosted in Google Cloud. Registrar details point to Wix.com as the underlying service provider, though the subdomain is not legitimately tied to any first-party Wix product. Creation date is recent (within 30 days), and the domain is currently unlisted by Google Safe Browsing. At least one public blocklist (Abuse.ch) has already tagged the IP range for malicious behavior.

This domain remains active and unblocked by major browsers as of the latest scan. Immediate response includes DNS-level and browser-extension blocking. Users should avoid interacting with any login prompts on this page. Remaining risk is elevated due to active hosting, low VT coverage, and the use of a legitimate hosting provider (Wix) to lend false credibility to the phishing lure.