helpliveapp[.]wixstudio[.]com

PhishDestroy identifies helpliveapp.wixstudio.com as an active crypto drainer domain impersonating legitimate live support platforms. The threat type is generic_phishing, with the domain leveraging a fraudulent WixStudio subdomain to deceive users into connecting crypto wallets or submitting sensitive credentials. While the exact drainer kit remains unconfirmed, the site's structure suggests automated fund extraction via malicious smart contracts or fake transaction approvals, a common tactic among crypto-focused phishing operations. This domain resolves to IP 34.144.206.118 and is secured with a Let's Encrypt SSL certificate, which does not indicate legitimacy. VirusTotal currently reports 4/95 detections, highlighting the evasive nature of the threat. The domain is registered under Wix.com's infrastructure, with no further registrar details available in public records. The creation date is undetermined, and the domain does not appear on Google Safe Browsing (GSB) or major blocklists as of the latest scan. Its low detection score suggests recent deployment or highly targeted distribution, likely through social engineering or malvertising campaigns. The domain remains active with an 'under_investigation' status, indicating ongoing analysis by security teams. Users are advised to avoid interaction and verify the legitimacy of live support platforms via PhishDestroy. The remaining risk is high due to the domain's current evasion of detection systems and potential for further weaponization. Immediate takedown or blocklisting is recommended to mitigate potential victimization.