liveapp-official[.]wixstudio[.]com

PhishDestroy identifies liveapp-official.wixstudio.com as an active counterfeit login portal scam targeting users with fake authentication pages. This domain mimics a legitimate application login interface to harvest credentials and session tokens. The fraudulent site resolves to IP 34.144.206.118 and utilizes a Let's Encrypt SSL certificate to appear legitimate. The counterfeit portal is hosted on Wix’s infrastructure (wixstudio.com), which may lend false credibility to unsuspecting victims.

Evidence supporting this assessment includes zero detections on VirusTotal (1/95 engines) as of the latest scan, indicating no detection by major antivirus or security platforms. The domain was registered under an unspecified registrar, with its creation date pending further OSINT verification. Additionally, the site remains unlisted on all major threat intelligence blocklists, enabling prolonged operation. These characteristics suggest the threat actor leveraged Wix’s reputation and free SSL certificates to evade initial detection while preparing for credential phishing operations.

Users who visited this domain should immediately revoke any compromised credentials and review account activity for unauthorized access. Enable multi-factor authentication (MFA) on all critical accounts to mitigate potential breaches. If any login credentials were entered, change passwords immediately and monitor for signs of account takeover. Report the domain to your organization’s security team or through platforms like Google Safe Browsing to aid in takedown efforts. Avoid interacting with this domain or any linked pages to prevent further exposure.