platforms-liveapp[.]wixstudio[.]com

This domain, platforms-liveapp.wixstudio.com, is identified as a credential theft phishing site impersonating Wix Studio infrastructure. Analysis indicates the page was designed to harvest login credentials from unsuspecting users by mimicking legitimate Wix Studio error pages, though no active phishing content is currently visible. The domain exhibits no direct indicators of crypto drainer activity or known phishing kits, but its association with Wix Studio branding and the 404 error page suggests an attempt to exploit trust in the platform for credential collection. Infrastructure analysis reveals the domain resolves to IP address 34.144.206.118, hosted on Google Cloud infrastructure. It is registered through GoDaddy.com, LLC, with a creation date of May 04, 2026, which is anomalous and likely indicative of typosquatting or domain spoofing. The domain is flagged by 9 out of 95 security vendors on VirusTotal, and it appears on 3 security blocklists, including PhishDestroy, PhishingArmy, and OISD. The SSL certificate is issued by Let’s Encrypt, and technologies detected include Wix, React, Google Cloud, Google Cloud CDN, and HTTP/3. No detections were reported by Google Safe Browsing at the time of analysis. The domain is currently offline, with a 404 error page displayed. While no active malicious content is present, the elevated risk level persists due to its prior association with credential theft attempts and its presence on multiple blocklists. Organizations are advised to block the domain at the network level and monitor for any re-emergence or similar domains leveraging Wix Studio branding. Users should verify domain authenticity before entering credentials and report any suspicious activity to their security teams.