liveintro-desktop[.]wixstudio[.]com

This domain, liveintro-desktop.wixstudio.com, is identified as part of a credential theft operation targeting users through deceptive login portals. Analysis indicates the infrastructure was designed to harvest account credentials by mimicking legitimate authentication interfaces, a common tactic in targeted phishing campaigns. The domain leverages hosting services associated with Wix Studio, a platform frequently exploited due to its accessibility and perceived legitimacy, which lowers user suspicion during initial interaction. Evidence supporting this assessment includes detection by 14 out of 95 security vendors on VirusTotal, indicating broad recognition of malicious intent. The domain was registered through GoDaddy.com, LLC, on April 17, 2026, an unusually future-dated entry suggesting potential obfuscation or misconfiguration. It appears on one security blocklist and resolves to the IP address 34.144.206.118, part of Google Cloud’s infrastructure. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious domains due to its free and automated issuance process. The page title, '404 Error: Page Not Found | Wix Studio,' suggests the phishing content has been removed or relocated, though residual artifacts remain detectable. Users who visited this domain should immediately revoke any entered credentials, particularly for financial, email, or corporate accounts. Monitor linked accounts for unauthorized activity and enable multi-factor authentication where available. If browser-based password managers were used, verify no saved credentials were auto-filled on the site. Network administrators should block the domain and its resolving IP at the perimeter to prevent further access. Given the elevated risk level, affected users are advised to conduct a full security review of associated devices, including malware scans and credential rotation for any potentially exposed accounts.