liveapp-connect[.]wixstudio[.]com

PhishDestroy identifies liveapp-connect.wixstudio.com as hosting a fraudulent login portal masquerading as a legitimate service. The domain leverages WixStudio’s infrastructure to deceive users into entering credentials under the guise of a secure connection. The threat is categorized as a credential-harvesting phishing attempt, designed to trick victims into surrendering login details for various online accounts. This specific campaign mimics a generic but plausible service name, likely targeting users expecting a legitimate login interface. The domain’s SSL certificate, issued by Let’s Encrypt, does not signify trustworthiness in this context, as threat actors frequently abuse reputable certificate authorities to lend false legitimacy to phishing pages.

This domain was flagged by PhishDestroy and currently shows 0 detections on VirusTotal out of 95 engines scanned. The domain resolves to IP address 34.144.206.118, hosted on Google Cloud infrastructure. The WixStudio subdomain suggests potential abuse of a legitimate platform to host malicious content, as attackers often exploit trusted hosting providers to evade detection. Creation date and blocklist status remain unverified due to limited historical data on this recently observed domain. Trust scores from domain reputation services are absent or low, reinforcing concerns over its legitimacy. The absence of detections does not equate to safety; this domain should be treated as actively malicious until proven otherwise.

Users should immediately avoid interacting with any login prompts or forms on liveapp-connect.wixstudio.com. If credentials were entered, change passwords immediately and enable multi-factor authentication on all associated accounts. Report the domain to your organization’s security team or through local cybercrime reporting channels to aid in takedown efforts. Organizations may consider blocking the IP address 34.144.206.118 at the network perimeter to prevent further access. Always verify website URLs through official channels and use browser extensions or security tools that detect phishing domains in real time.