started-liveus[.]wixstudio[.]com

The domain started-liveus.wixstudio.com has been assessed as posing an elevated risk of generic phishing. The site is designed to mimic legitimate web services or institutions, potentially tricking users into revealing sensitive information such as login credentials or financial data.

Analysis indicates that the domain was created on April 21, 2026, and is registered through GoDaddy.com, LLC. VirusTotal reports that 8 out of 95 security vendors flag this domain as malicious, reflecting a moderate level of consensus among security experts. The domain resolves to the IP address 34.144.206.118 and is protected by a Let's Encrypt SSL certificate. It is currently taken offline, which may indicate that the phishing campaign has been interrupted or that the operators are preparing a new attack. The site appears on three security blocklists, including PhishDestroy, PhishingArmy, and OISD, further corroborating its malicious nature. Gridinsoft has assigned a trust score of 0/100, indicating a complete lack of trustworthiness. Technologies detected on the domain include Wix, React, Google Cloud, and Google Cloud CDN, suggesting a sophisticated and potentially well-resourced threat actor.

To mitigate the risks associated with this phishing domain, organizations and individuals should implement the following measures: ensure that all endpoints are configured to block access to the domain based on its current status on security blocklists. Conduct regular security awareness training to educate users on recognizing and avoiding phishing attempts, including the use of secure, verified links and verifying the URL before entering any sensitive information. Additionally, implement multi-factor authentication (MFA) for all critical accounts and services to add an extra layer of security against credential theft. Network administrators should monitor for any attempts to access this domain and configure firewalls and DNS filters to prevent such connections.