liveio-download[.]wixstudio[.]com

PhishDestroy flags liveio-download.wixstudio.com as an active crypto drainer domain designed to trick users into connecting wallets and approve malicious transactions. The domain impersonates a legitimate software download portal, leveraging a WixStudio subdomain to establish false credibility. While no specific drainer kit signature has been published, the page likely contains Web3 wallet-draining scripts commonly seen in fake software cracks and game mods. This domain resolves to IP 34.144.206.118 and uses a Let's Encrypt SSL certificate to mimic trust. VirusTotal currently returns 3/95 detections as of seed 6b935e, suggesting it remains under the radar. The domain was registered via Wix (likely through WixStudio) with no public creation date in WHOIS. Google Safe Browsing (GSB) has not marked it as malicious, and it remains unlisted in major threat intelligence blocklists. The lack of detections indicates a recently activated or stealthily operated threat. The threat is currently active with no takedown or block in place. Users should block the domain and IP at the network level and avoid interacting with any files hosted. Remaining risk is moderate due to low AV coverage and the use of a reputable hosting/service platform. Continuously monitor VT updates and consider blocking similar WixStudio subdomains hosting crypto-related content.