platform-liveapp[.]wixstudio[.]com

PhishDestroy identifies platform-liveapp.wixstudio.com as an active fake login page phishing domain designed to harvest user credentials. This domain mimics legitimate login portals, tricking victims into submitting sensitive information such as usernames, passwords, or multi-factor authentication codes. The threat actor behind this campaign leverages the trusted WixStudio platform to host deceptive login interfaces, increasing the likelihood of successful credential theft. Users interacting with this domain risk unauthorized access to their accounts, financial data exposure, or identity theft. Immediate action is required to mitigate potential harm. This domain was flagged during routine threat intelligence operations, with key technical indicators including a VirusTotal detection rate of 3/95, indicating no antivirus or security vendor has yet flagged it. The domain resolves to IP address 34.144.206.118, a server hosted on Google Cloud, and utilizes a Let's Encrypt SSL certificate to appear legitimate. Further analysis reveals the domain was recently created, though the exact registration date is undisclosed in public records. As of this report, the domain remains active and unblocked by major threat intelligence platforms. The lack of detections highlights the evasive nature of this campaign, which relies on low initial reputation and delayed malicious activity to avoid early detection. If you have visited platform-liveapp.wixstudio.com or interacted with any content on this domain, PhishDestroy urges you to take immediate precautions. First, revoke any credentials submitted to this site and enable multi-factor authentication on all linked accounts. Next, scan your devices for malware or unauthorized access using reputable security software. Finally, report this domain to PhishDestroy and your organization’s security team to aid in broader threat mitigation. Do not enter sensitive information on unfamiliar or suspicious login pages, and always verify URLs through official channels before submitting credentials. Proactive vigilance is critical to preventing credential theft and account compromise.